Computer Hacking Forensic Investigator (CHFI v10) — Question 239

Robert needs to copy an OS disk snapshot of a compromised VM to a storage account in different region for further investigation. Which of the following should he use in this scenario?

Answer options

• A. Azure Active Directory
• B. Azure Portal
• C. Azure CLI
• D. Azure Monitor

Correct answer: C

Explanation

The correct answer is C, Azure CLI, as it allows for efficient command-line operations to copy resources across regions. Azure Portal (B) provides a graphical interface but is not as suited for scripting or automation of such tasks. Azure Active Directory (A) is unrelated to storage operations, and Azure Monitor (D) is focused on monitoring and analytics rather than resource management.