One of the main components of system audits is the ability to track changes over time and to match these changes with continued compliance and internal processes.
Which aspect of cloud computing makes this particular component more challenging than in a traditional data center?
Click on the arrows to vote for the correct answer
A. B. C. D.B.
Cloud services make exclusive use of virtualization, and systems change over time, including the addition, subtraction, and reimaging of virtual machines.
It is extremely unlikely that the exact same virtual machines and images used in a previous audit would still be in use or even available for a later audit, making the tracking of changes over time extremely difficult, or even impossible.
Elasticity refers to the ability to add and remove resources from a system or service to meet current demand, and although it plays a factor in making the tracking of virtual machines very difficult over time, it is not the best answer in this case.
Resource pooling pertains to a cloud environment sharing a large amount of resources between different customers and services.
Portability refers to the ability to move systems or services easily between different cloud providers.
The correct answer is C. Elasticity.
In traditional data centers, the number of resources, such as servers, storage, and networking equipment, is typically fixed and not easily scaled up or down. Any changes made to these resources can be tracked and monitored easily.
However, in cloud computing, elasticity allows for resources to be dynamically allocated and de-allocated based on demand. This means that resources can be added or removed from a system at any time, without warning or notification. As a result, tracking changes over time and ensuring continued compliance becomes more challenging.
For example, if an organization deploys a new instance of a virtual machine to handle increased traffic, and then later shuts down that instance when traffic subsides, it may be difficult to track that change and ensure that it was done in compliance with internal processes.
Furthermore, because cloud computing allows for rapid and frequent changes to be made to a system, it may be difficult to keep track of all the changes that occur, especially if the system is highly dynamic and constantly evolving.
Therefore, it is important for organizations to have robust auditing and compliance processes in place that can track changes in cloud systems over time and ensure continued compliance with internal processes and industry regulations.