Drag and Drop Question Drag and drop the cloud characteristic from the left onto the challenges presented for gathering evidence on the right. Answer:

The correct answer is rapid Elasticity; measured service; resource pooling; broad network access. The correct arrangement maps each cloud characteristic to its corresponding forensic/evidence-gathering challenge: Rapid Elasticity makes it difficult to capture volatile data because resources scale up and down quickly, destroying evidence; Measured Service creates audit log…

Submitted by dimitri_ru· Mar 6, 2026Cloud Security and Digital Forensics - Understanding how the five NIST essential cloud characteristics (broad network access, rapid elasticity, measured service, resource pooling, on-demand self-service) create specific challenges for forensic investigators when gathering and preserving digital evidence in cloud environments.

Question

Exhibit

Answer Area

Drag items

broad network accessrapid Elasticitymeasured serviceresource pooling

Correct arrangement

rapid Elasticity
measured service
resource pooling
broad network access

Explanation

The correct arrangement maps each cloud characteristic to its corresponding forensic/evidence-gathering challenge: Rapid Elasticity makes it difficult to capture volatile data because resources scale up and down quickly, destroying evidence; Measured Service creates audit log complexity as billing/usage data is controlled by the provider; Resource Pooling means data from multiple tenants shares the same physical infrastructure, making isolation and attribution of evidence extremely difficult; and Broad Network Access means data traverses multiple networks and jurisdictions, complicating evidence acquisition and chain of custody. Each NIST-defined cloud characteristic introduces a unique forensic challenge that investigators must account for when gathering legally admissible evidence.

Topics

#Cloud Forensics#NIST Cloud Characteristics#Digital Evidence#Incident Response

Community Discussion

No community discussion yet for this question.

Full 300-215 Practice