Exam 312-49 topic 1 question 390 discussion

Ans should be A

I think ti is A Cloud as a subject It refers to a crime in which the attackers attempt to compromise the security of a cloud environment to steal data or inject malware. Example: Stealing the identity of a cloud user, unauthorized modification or deletion of stored data, and installation of malware on the cloud. ▪ Cloud as an object In this type of crime, attackers use a cloud system to commit a crime against the CSP; here, the cloud behaves like an object. In this case, the main objective of the attacker is to impact the CSP instead of the cloud environment. Example: DDoS attacks over the cloud that can cause failure in the entire cloud environment. ▪ Cloud as a tool The cloud becomes a tool when the attacker uses a compromised cloud account to attack other accounts. In such cases, both the source and target cloud can store the evidence data. Example: Using a cloud to perform an attack on other clouds or when a crime-related evidence is saved and shared in the cloud

I think D is correct. Cloud as a subject: It refers to a crime in which the attackers try to compromise the security of a cloud environment to steal data or inject a malware Cloud as an object: when the attacker uses the cloud to commit a crime targeted towards the CSP.