Articulate Legal Requirements and Unique Risks Within the Cloud Environment CCSP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is involved in a legal dispute and must preserve electronically stored information (ESI) from a cloud-based file storage service. The legal team has issued a litigation hold. Which of the following is the most important action to take to ensure the ESI is preserved?

   • AEnable the cloud provider's litigation hold feature and verify that it is working.
   • BInform all employees to stop using the cloud file storage service immediately.
   • CRely on the cloud provider's default retention policies to preserve the data.
   • DTake a full backup of the cloud storage and store it on a local server.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security analyst needs to collect forensic evidence from a cloud-based virtual machine that is suspected of being compromised. The VM is running in a multi-tenant environment. Which of the following is the most important factor to consider when collecting evidence?

   • AThe need to collect evidence from the hypervisor, as it contains all data from all VMs.
   • BThe need to collect evidence as quickly as possible, even if it means shutting down the VM.
   • CThe VM's public IP address, to ensure the evidence is collected from the correct host.
   • DThe need to preserve the integrity of the evidence, including the chain of custody, while collecting data from the VM.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which ISO/IEC standard provides guidelines for the identification, collection, acquisition, and preservation of digital evidence?

   • AISO/IEC 27042:2015
   • BISO/IEC 27041:2015
   • CISO/IEC 27043:2015
   • DISO/IEC 27037:2012
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is involved in litigation and must preserve electronically stored information (ESI) that resides in a cloud-based collaboration platform. The legal team has issued a litigation hold. What is the most critical first step for the company to take to ensure ESI is preserved?

   • ARely on the cloud provider's default retention policies to preserve the data automatically.
   • BImmediately delete all data that is not relevant to the case to reduce storage costs.
   • CTake a full backup of the entire cloud environment and store it offsite, but do not inform the provider.
   • DNotify the cloud provider of the litigation hold and request that the provider preserve all relevant ESI.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A healthcare organization in the United States is considering moving its electronic health records (EHR) to a public cloud provider. The organization must comply with HIPAA. Which of the following is a critical legal risk that the organization must address before proceeding?

   • AThe cloud provider must be a covered entity under HIPAA to handle protected health information (PHI).
   • BThe organization must ensure the cloud provider stores all PHI on-premises to avoid HIPAA violations.
   • CThe organization must obtain written consent from each patient before storing PHI in the cloud.
   • DThe organization must sign a business associate agreement (BAA) with the cloud provider, and the provider must implement appropriate safeguards for PHI.
   Reveal Solution Discussion Select an answer first