Which of the following data-sanitation approaches are always available within a cloud environment? Response:

Physical destruction, such as degaussing or shredding, requires physical access to the storage media, which is typically not available to cloud tenants.

Shredding is a form of physical destruction, requiring physical access to the storage media, which is typically not available to cloud tenants.

Overwriting data multiple times on a disk makes it unrecoverable, but in a shared cloud environment, tenants typically do not have direct control over the underlying physical storage media to guarantee overwriting specific sectors, making cryptographic erasure a more universal and tenant-controlled method.

Cryptographic erasure, also known as crypto-shredding, makes data unrecoverable by deleting or revoking the encryption key used to encrypt the data, effectively rendering the encrypted data useless without requiring physical access to the storage media. This is a software-based approach and always available in a cloud environment.