Computer Hacking Forensic Investigator (CHFI v10) — Question 549

Which cloud model allows an investigator to acquire the instance of a virtual machine and initiate the forensics examination process?

Answer options

• A. PaaS model
• B. IaaS model
• C. SaaS model
• D. SecaaS model

Correct answer: B

Explanation

The IaaS model (Infrastructure as a Service) provides the necessary resources to create and control virtual machines, making it suitable for forensic investigations. In contrast, the PaaS model focuses on application development, the SaaS model delivers software over the internet, and SecaaS model pertains to security services, none of which provide direct access to virtual machine instances for forensic purposes.