Certified Cloud Security Professional (CCSP) — Question 334

You are working for a cloud service provider and receive an eDiscovery order pertaining to one of your customers.
Which of the following would be the most appropriate action to take first?

Answer options

• A. Take a shapshot of the virtual machines
• B. Escrow the encryption keys
• C. Copy the data
• D. Notify the customer

Correct answer: D

Explanation

Notifying the customer is the correct first step because they need to be aware of the eDiscovery order and can provide guidance or context regarding the request. Taking a snapshot, escrowing encryption keys, or copying data should occur after the customer has been informed and consulted, as they may have specific protocols to follow.