According to the CHFI v11 Cloud Forensics domain, one of the most significant challenges in cloud-based investigations is data residency and multi-jurisdictional storage . Cloud service providers often distribute customer data across multiple geographic regions and countries for redundancy, performance optimization, and availability. As a result, evidence relevant to a single investigation may reside in different legal jurisdictions , each governed by its own data protection laws, privacy regulations, and disclosure requirements.
In the given scenario, the investigator has already obtained the necessary legal authorizations, which rules out lack of legal understanding as the primary issue. However, despite these approvals, accessing data spread across multiple jurisdictions introduces procedural delays , coordination challenges with cloud service providers, and dependencies on international legal frameworks. CHFI v11 explicitly highlights that cross- border data access is a major obstacle in cloud forensics, often slowing investigations even when warrants and mutual legal assistance mechanisms are in place.
While volatility of logs and forensic readiness are valid cloud challenges, the scenario emphasizes delays caused by geographic and jurisdictional dispersion of data , not data loss or lack of preparation. CHFI v11 stresses that investigators must plan for jurisdictional complexity, sovereignty issues, and provider cooperation timelines when handling cloud-hosted evidence.
Therefore, the primary challenge faced by the investigator is data storage in multiple jurisdictions leading to issues in accessing evidence , making Option D the correct and CHFI v11-verified answer.