University:
Eastern Kentucky University
Course:
CSC 189 | Computing Concepts and Programming
Academic year:

2023
Views:

22

Pages:

2
Author:

Trevon Bernard

Guide to Computer Forensics and Investigations Ch. 13 Solutions-1 Chapter 13 Solutions Review Questions 1. Amazon was an early provider of Web-based services that eventually developed into the cloud concept. True or False? 2. What are the three levels of cloud services defined by NIST? 3. What capabilities should a forensics tool have to acquire data from a cloud? (Choose all that apply.) True c. SaaS, PaaS, and IaaS a. Identify and acquire data from the cloud. b. Expand and contract data storage capabilities as needed for service changes. d. Examine virtual systems. 4. Commingled data isn’t a concern when acquiring cloud data. True or False? 5. A(n) ________________________ is a contract between a CSP and the customer that describes what services are being provided and at what level. 6. Which of the following is a mechanism the ECPA describes for the government to get electronic information from a provider? (Choose all that apply.) False CSA or cloud service agreement a. Subpoenas with prior notice c. Search warrants d. Court orders 7. In which cloud service level can customers rent hardware and install whatever OSs and applications they need? 8. What are the two states of encrypted data in a secure cloud? 9. Evidence of cloud access found on a smartphone usually means which cloud service level was in use? IaaS or infrastructure as a service d. Data in motion and data at rest d. SaaS 10. Which of the following cloud deployment methods typically offers no security? b. Public cloud 11. The multitenancy nature of cloud environments means conflicts in privacy laws can occur. True or False? True 12. To see Google Drive synchronization files, you need a SQL viewer. True or False? True 13. A CSP’s incident response team typically consists of which staff? List at least three positions. Guide to Computer Forensics and Investigations Ch. 13 Solutions-2 system administrators, network administrators, and legal advisors 14. The cloud services Dropbox, Google Drive, and OneDrive have Registry entries. True or False? True 15. When should a temporary restraining order be requested for cloud environments? d. When a search warrant requires seizing a CSP’s hardware and software used by other parties not involved in the case 16. Updates to the EU Data Protection Rules will affect how data is moved regardless of location. True or False? True 17. NIST document SP 500-322 defines more than 75 cloud services, including which of the following? (Choose all that apply.) a. Backup as a service b. Security as a service c. Drupal as a service 18. Public cloud services such as Dropbox and OneDrive use what encryption applications? Sophos Safeguard and Sophos Mobile Control