The correct answer iselectronic discovery (e-discovery). This process involves identifying, collecting, and producing electronically stored information (ESI) that may serve as evidence in legal proceedings. E- discovery ensures that relevant data such as emails, logs, or documents is preserved and made available in a legally defensible manner.
Chain of custody refers to documenting the handling of evidence once collected, while forensic imaging creates exact copies of digital media. Gap analysis identifies weaknesses in processes but is unrelated to evidence collection.
E-discovery is essential in both corporate and cloud contexts, as data is often distributed across multiple environments. Cloud providers may assist customers with e-discovery by providing tools for searching, tagging, and exporting relevant data. A sound e-discovery process ensures compliance with legal obligations and prevents spoliation of evidence.

In a cloud environment, responsibility forhardware managementshifts primarily to the cloud provider.
Customers no longer manage servers, storage devices, or physical networks directly. As a result, hardware management policies are less critical for customer audits compared to data classification, procurement, or acceptable use.
Data classification remains essential to secure sensitive information. Software procurement policies are important to control licensing and compliance. Acceptable use policies govern employee behavior in cloud environments.
While organizations may still need high-level oversight of hardware through contracts and SLAs, detailed hardware policies have a reduced role. Instead, emphasis shifts to managing the shared responsibility model, ensuring cloud provider controls complement customer governance.

Key escrow is the management process that involves multiple key holders, where each party has access to a portion of the cryptographic information. Managing Cloud principles explain that key escrow is designed to ensure availability and recoverability of encrypted data while maintaining security controls.
In this model, encryption keys are stored securely with trusted third parties or divided among multiple custodians. No single individual has full access to the complete key, reducing the risk of misuse or compromise. Key escrow is often used to support compliance, lawful access requirements, and business continuity needs, ensuring that encrypted data can be recovered if the primary key holder is unavailable.
The other options do not fit this definition. Recovery refers to restoring keys or data, revocation disables compromised keys, and distribution focuses on delivering keys to authorized systems. Therefore, escrow is the correct answer.

Persistent protection is the security strategy most closely associated with data rights management (DRM) solutions. Managing Cloud principles explain that DRM is designed to ensure that data remains protected throughout its entire lifecycle, regardless of where it is stored, shared, or accessed.
Persistent protection means that security controls such as access restrictions, usage limitations, and expiration rules stay attached to the data itself. Even if the data is copied, transferred, or moved outside the original system, DRM policies continue to enforce protection. This approach is critical in cloud environments where data frequently moves across platforms, users, and geographic regions.
The other options do not represent DRM strategies. Multilevel aggregation and enhanced detail relate to data processing or analytics concepts, while unexpired digital content describes a content state rather than a security strategy. Therefore, persistent protection correctly represents the security approach used by data rights management solutions.

The Assurance section of a contract specifies the customer's rights to verify that the vendor is meeting contractual and compliance obligations. This often includes the right to audit, request independent certifications, or require compliance reports such as SOC 2 or ISO 27001.
Indemnification deals with liability coverage, termination outlines exit conditions, and litigation describes dispute resolution mechanisms. None of these provide the customer with ongoing oversight rights.
Audit rights are critical in cloud contracts to maintain transparency, enforce accountability, and verify that shared responsibility is being upheld. Assurance provisions give customers confidence in the provider's security and operational practices, ensuring compliance with industry regulations.