Certified Information Security Manager (CISM) — Question 499

Which of the following service offerings in a typical Infrastructure as a Service (IaaS) model will BEST enable a cloud service provider to assist customers when recovering from a security incident?

Answer options

• A. Capability to take a snapshot of virtual machines
• B. Capability of online virtual machine analysis
• C. Availability of web application firewall logs
• D. Availability of current infrastructure documentation

Correct answer: A

Explanation

The correct answer is A, as taking a snapshot of virtual machines allows for quick restoration to a previous state, which is crucial during recovery from a security incident. Options B, C, and D, while useful for analysis and monitoring, do not provide the immediate restoration capabilities that snapshots offer.