nerdexam
(ISC)2

CCSP · Question #37

Which of the following data sanitation methods would be the MOST effective if you needed to securely remove data as quickly as possible in a cloud environment?

The correct answer is B. Cryptographic erasure. Cryptographic erasure is the most effective and rapid data sanitation method in a cloud environment because it involves simply destroying the encryption key, making the encrypted data irrecoverable without needing to physically overwrite large data volumes.

Submitted by devops_kid· Apr 18, 2026Cloud Data Security

Question

Which of the following data sanitation methods would be the MOST effective if you needed to securely remove data as quickly as possible in a cloud environment?

Options

  • AZeroing
  • BCryptographic erasure
  • COverwriting
  • DDegaussing

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    80% (28)
  • C
    11% (4)
  • D
    3% (1)

Why each option

Cryptographic erasure is the most effective and rapid data sanitation method in a cloud environment because it involves simply destroying the encryption key, making the encrypted data irrecoverable without needing to physically overwrite large data volumes.

AZeroing

Zeroing, a form of overwriting, involves writing zeros over the data, which is effective but significantly slower than cryptographic erasure, especially for large datasets.

BCryptographic erasureCorrect

Cryptographic erasure is the most effective and quickest method for secure data removal in a cloud environment because it involves invalidating or deleting the encryption key associated with the data. Once the key is destroyed, the encrypted data becomes mathematically unrecoverable and unintelligible, achieving secure erasure without requiring time-consuming physical overwriting of storage media.

COverwriting

Overwriting data, similar to zeroing, involves writing new data patterns over existing data; while effective, it is a time-consuming process that may not be suitable for rapid data sanitation in a cloud environment.

DDegaussing

Degaussing involves using a strong magnetic field to neutralize magnetic storage media; this method is not applicable to most cloud storage solutions, which are often solid-state or virtualized, and would require physical access to the media.

Concept tested: Cloud data sanitation methods

Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-fedramp-guidance

Topics

#Data Sanitation#Cryptographic Erasure#Cloud Data Disposal#Secure Deletion

Community Discussion

No community discussion yet for this question.

Full CCSP Practice