nerdexam
Isaca

CRISC · Question #124

Which of the following is the BEST way to ensure data is properly sanitized while in cloud storage?

The correct answer is B. Cryptographically scrambling the data. Cryptographically scrambling data is the most effective method for sanitizing data in cloud storage, as it renders the data unreadable without the encryption key, which can then be securely destroyed.

Submitted by obi.ng· Apr 18, 2026Information Technology and Security

Question

Which of the following is the BEST way to ensure data is properly sanitized while in cloud storage?

Options

  • ADeleting the data from the file system
  • BCryptographically scrambling the data
  • CFormatting the cloud storage at the block level
  • DDegaussing the cloud storage media

How the community answered

(27 responses)
  • B
    89% (24)
  • C
    7% (2)
  • D
    4% (1)

Why each option

Cryptographically scrambling data is the most effective method for sanitizing data in cloud storage, as it renders the data unreadable without the encryption key, which can then be securely destroyed.

ADeleting the data from the file system

Deleting data from the file system often only removes pointers to the data, leaving the actual data blocks recoverable with specialized tools until overwritten.

BCryptographically scrambling the dataCorrect

Cryptographically scrambling data involves encrypting it with a strong key and then securely destroying the encryption key. This renders the underlying data irrecoverable and unreadable, effectively sanitizing it without requiring physical access to the storage media, which is typically not possible in a cloud environment.

CFormatting the cloud storage at the block level

Formatting cloud storage at the block level is usually an operation performed by the cloud provider, and even if possible, it's not a direct control for the customer to sanitize specific data objects without affecting the entire storage volume.

DDegaussing the cloud storage media

Degaussing is a physical destruction method using strong magnetic fields to erase data from magnetic media; this is not applicable for logical data sanitization in a multi-tenant cloud environment where users do not have access to the physical media.

Concept tested: Cloud data sanitization

Source: https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final

Topics

#Data sanitization#Cloud security#Cryptographic erasure#Data destruction

Community Discussion

No community discussion yet for this question.

Full CRISC Practice