Computer Hacking Forensic Investigator (CHFI v10) — Question 395
A cybercrime investigator is evaluating a data breach in a company's AWS infrastructure. The breached service was categorized as an AWS container service. What primary security aspects were likely managed by the company and not by AWS, which the investigator should first focus on?
Answer options
- A. Physical infrastructure and foundational services
- B. Network configuration of the container services
- C. Data management and firewall configuration
- D. Application platform and Operating System (OS) security
Correct answer: D
Explanation
The primary responsibility for securing the application platform and Operating System (OS) lies with the company, as AWS provides the underlying infrastructure. While AWS manages physical security and foundational services, network configurations, and firewall settings, the company must ensure that the application and OS are secured against vulnerabilities, making option D the correct answer. The other options relate to areas where AWS has a significant role in managing security.