A company is considering moving from an IaaS cloud deployment to a PaaS deployment model. Which challenge would this introduce to the incident response process?

Question

Options

• Ainfrastructure complexity
• Bforensics data acquisition
• Capplication logs analysis
• Dapplication data recovery

• A
  10% (4)
• B
  80% (33)
• C
  2% (1)
• D
  7% (3)

Explanation

Moving to PaaS removes your direct access to the underlying infrastructure - you no longer control the OS, hypervisor, or physical hardware. This makes forensics data acquisition (B) the key challenge: in IaaS you can take raw disk images, capture memory, and pull system-level artifacts; in PaaS, the cloud provider owns that layer and you simply cannot perform traditional forensic collection on infrastructure you don't control.

Why the distractors are wrong:

• A (infrastructure complexity) - PaaS actually reduces infrastructure complexity because the provider manages the OS, runtime, and middleware. This gets easier, not harder.
• C (application logs analysis) - PaaS platforms typically expose application-level logs through dashboards or APIs; your ability to analyze them doesn't meaningfully decrease.
• D (application data recovery) - Data recovery is a continuity concern, not specific to the IaaS→PaaS transition. PaaS providers often include managed backup/restore, making this no worse.

Memory tip: Think of PaaS as "Provider Abstracts Away Stuff." The more the provider abstracts, the less raw evidence you can grab - forensics requires getting under the application layer, which PaaS locks away from you.

No community discussion yet for this question.