What can the organization do initially to avoid the legal implications of moving data between two AWS regions for analysis?

A security incident has occurred within an organization’s AWS environment. A cloud forensic investigation procedure is initiated for the acquisition of forensic evidence from the compromised EC2 instances. However, it is essential to abide by the data privacy laws while provisioning any forensic instance and sending it for analysis.

What can the organization do initially to avoid the legal implications of moving data between two AWS regions for analysis?
A . Create evidence volume from the snapshot
B . Provision and launch a forensic workstation
C . Mount the evidence volume on the forensic workstation
D . Attach the evidence volume to the forensic workstation

View Answer

Answer: A

Explanation:

When dealing with a security incident in an AWS environment, it’s crucial to handle forensic evidence in a way that complies with data privacy laws. The initial step to avoid legal implications when moving data between AWS regions for analysis is to create an evidence volume from the snapshot of the compromised EC2 instances.