Exam 312-49v10 topic 1 question 390 discussion

Here’s why: Cloud as an Object: The cybercrime is targeting the resources, data, or services within the cloud environment. The cloud infrastructure or services are the primary focus of the criminal activity, making them the "object" of the crime. Cloud as a Subject: This would imply that the investigation or focus is on the cloud’s operational aspects, its role in the crime, or its vulnerabilities, rather than the crime occurring within the cloud environment itself. In summary, D. Cloud as an Object accurately describes the situation where the crime is occurring within the cloud environment, as the cloud resources and services are the direct targets or components involved in the crime.

Cloud as a Subject refers to scenarios where the cloud itself is the focus of the analysis or investigation, typically in terms of its behavior, vulnerabilities, or operations. However, in the context of cybercrime occurring directly within a cloud environment, the cloud is considered: D. Cloud as an Object

took place within a CSP's cloud environment

D > It was actually mentioned !!, so it is D. " took place within a CSP's cloud environment"

A > Not D cause on this crime the attackers use the cloud system to commit the crime against the CSP but that wasn't mentioned in the question.

https://bookshelf.vitalsource.com/reader/books/9781635676969/pageid/1139 Module 12: Cloud Forensics / LO#02: Understand Cloud Forensics Page 1140 Cloud Crimes Any criminal activity that involves a cloud environment used as a subject, object, or tool can be considered as a cloud crime. Cloud as a subject It refers to a crime in which the attackers attempt to compromise the security of a cloud environment to steal data or inject malware. Example: Stealing the identity of a cloud user, unauthorized modification or deletion of stored data, and installation of malware on the cloud. --> Cloud as a Subject

Page 1125 "Cloud as a subject: In this case, crime is committed within the cloud environment Example: Stealing the identity of cloud user accounts"