nerdexam
Google

PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER · Question #139

A workload is created and terminated within five minutes and later linked to cryptomining activity. What MOST complicates the investigation?

The correct answer is B. Short-lived (ephemeral) resources. Ephemeral resources reduce forensic evidence and make timeline reconstruction difficult.

Cloud Forensics and Incident Response

Question

A workload is created and terminated within five minutes and later linked to cryptomining activity. What MOST complicates the investigation?

Options

  • AEncryption at rest
  • BShort-lived (ephemeral) resources
  • CGlobal IP addressing
  • DHigh availability architecture

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    83% (20)
  • C
    4% (1)
  • D
    4% (1)

Explanation

Ephemeral resources reduce forensic evidence and make timeline reconstruction difficult.

Topics

#ephemeral resources#cloud forensics#cryptomining detection#incident investigation complexity

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-SECURITY-OPERATIONS-ENGINEER Practice