CCSP · Question #37
Which of the following data sanitation methods would be the MOST effective if you needed to securely remove data as quickly as possible in a cloud environment?
The correct answer is B. Cryptographic erasure. Cryptographic erasure is the most effective and rapid data sanitation method in a cloud environment because it involves simply destroying the encryption key, making the encrypted data irrecoverable without needing to physically overwrite large data volumes.
Question
Which of the following data sanitation methods would be the MOST effective if you needed to securely remove data as quickly as possible in a cloud environment?
Options
- AZeroing
- BCryptographic erasure
- COverwriting
- DDegaussing
How the community answered
(35 responses)- A6% (2)
- B80% (28)
- C11% (4)
- D3% (1)
Why each option
Cryptographic erasure is the most effective and rapid data sanitation method in a cloud environment because it involves simply destroying the encryption key, making the encrypted data irrecoverable without needing to physically overwrite large data volumes.
Zeroing, a form of overwriting, involves writing zeros over the data, which is effective but significantly slower than cryptographic erasure, especially for large datasets.
Cryptographic erasure is the most effective and quickest method for secure data removal in a cloud environment because it involves invalidating or deleting the encryption key associated with the data. Once the key is destroyed, the encrypted data becomes mathematically unrecoverable and unintelligible, achieving secure erasure without requiring time-consuming physical overwriting of storage media.
Overwriting data, similar to zeroing, involves writing new data patterns over existing data; while effective, it is a time-consuming process that may not be suitable for rapid data sanitation in a cloud environment.
Degaussing involves using a strong magnetic field to neutralize magnetic storage media; this method is not applicable to most cloud storage solutions, which are often solid-state or virtualized, and would require physical access to the media.
Concept tested: Cloud data sanitation methods
Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-fedramp-guidance
Topics
Community Discussion
No community discussion yet for this question.