During a cybercrime investigation involving a large-scale data breach, the investigator uncovers that the evidence...

According to theCHFI v11 Cloud Forensicsdomain, one of the most significant challenges in cloud-based investigations isdata residency and multi-jurisdictional storage. Cloud service providers often distribute customer data acrossmultiple geographic regions and countriesfor redundancy, performance optimization, and availability. As a result, evidence relevant to a single investigation may reside indifferent legal jurisdictions, each governed by its own data protection laws, privacy regulations, and disclosure requirements.

In the given scenario, the investigator has already obtained the necessary legal authorizations, which rules out lack of legal understanding as the primary issue. However, despite these approvals,accessing data spread across multiple jurisdictions introduces procedural delays, coordination challenges with cloud service providers, and dependencies on international legal frameworks. CHFI v11 explicitly highlights thatcross-border data accessis a major obstacle in cloud forensics, often slowing investigations even when warrants and mutual legal assistance mechanisms are in place.

While volatility of logs and forensic readiness are valid cloud challenges, the scenario emphasizesdelays caused by geographic and jurisdictional dispersion of data, not data loss or lack of preparation. CHFI v11 stresses that investigators must plan forjurisdictional complexity, sovereignty issues, and provider cooperation timelineswhen handling cloud-hosted evidence.

Therefore, the primary challenge faced by the investigator isdata storage in multiple jurisdictions leading to issues in accessing evidence, makingOption Dthe correct and CHFI v11–verified answer.