Question

A security analyst is tasked with monitoring workloads that a development team spins up and tears down in a public cloud environment. The workloads are ephemeral virtual instances that may exist for only minutes before being terminated. The analyst notices that by the time an alert is investigated, the instance is often already gone, leaving no host to examine. Which characteristic of cloud environments is MOST responsible for this data visibility challenge?

Accepted Answer

The short-lived, dynamic nature of ephemeral instances makes it difficult to capture and retain host telemetry before resources are deprovisioned

Answer

Cloud providers encrypt all inter-instance traffic, preventing any host-based logging from being generated

Answer

Network Address Translation at the cloud edge randomizes instance identities on every boot

Answer

Role-based access control policies prevent analysts from ever collecting host logs in a shared-responsibility model