What factor(s), if any, allows for more efficient and effective containment and recovery in a cloud environment than in a non-cloud environment.

Question

Options

• Aencrypted data files
• Bno part of incident response is easier in a cloud environment
• Cfrequent backup routines
• Dmultitenancy and software as a service models
• EVirtualization technologies, and the elasticity inherent in cloud computing platforms

• A
  2% (1)
• B
  2% (1)
• C
  13% (7)
• D
  7% (4)
• E
  77% (43)

Explanation

The cloud often provides a lot more flexibility in this phase of the response, especially for IaaS. Software-defined infrastructure allows you to quickly rebuild from scratch in a clean environment, and, for more isolated attacks, inherent cloud characteristics-such as auto-scale groups, API calls for changing virtual network or machine configurations, and snapshots-can speed quarantine, eradication, and recovery processes. For example, on many platforms you can instantly quarantine virtual machines by moving the instance out of the auto-scale group, isolating it with virtual firewalls, and replacing it.

No community discussion yet for this question.