CCSK Question #101: Real Exam Question with Answer & Explanation

The correct answer is E. Virtualization technologies, and the elasticity inherent in cloud computing platforms. The cloud often provides a lot more flexibility in this phase of the response, especially for IaaS. Software-defined infrastructure allows you to quickly rebuild from scratch in a clean environment, and, for more isolated attacks, inherent cloud characteristics-such as auto-scale

Question

What factor(s), if any, allows for more efficient and effective containment and recovery in a cloud environment than in a non-cloud environment.

Options

Aencrypted data files
Bno part of incident response is easier in a cloud environment
Cfrequent backup routines
Dmultitenancy and software as a service models
EVirtualization technologies, and the elasticity inherent in cloud computing platforms

Explanation

The cloud often provides a lot more flexibility in this phase of the response, especially for IaaS. Software-defined infrastructure allows you to quickly rebuild from scratch in a clean environment, and, for more isolated attacks, inherent cloud characteristics-such as auto-scale groups, API calls for changing virtual network or machine configurations, and snapshots-can speed quarantine, eradication, and recovery processes. For example, on many platforms you can instantly quarantine virtual machines by moving the instance out of the auto-scale group, isolating it with virtual firewalls, and replacing it.

Community Discussion

No community discussion yet for this question.

Full CCSK Practice