nerdexam
CompTIA

SG0-001 · Question #479

Assuming that unique keys exist for each tape backup job, which of the following is the BEST advantage of using Tape encryption in regards to expiring tapes?

The correct answer is B. Tapes that are expired only need the keys destroyed to make the data inaccessible.. The best advantage of using tape encryption with unique keys for expiring tapes is that destroying the specific encryption key renders the data inaccessible without needing physical reformatting.

Storage Management

Question

Assuming that unique keys exist for each tape backup job, which of the following is the BEST advantage of using Tape encryption in regards to expiring tapes?

Options

  • ATapes that are expired only need to be reformatted to make the data inaccessible.
  • BTapes that are expired only need the keys destroyed to make the data inaccessible.
  • CTapes that are expired only need to be overwritten without reformatting to make the data
  • DTapes that are expired must be degaussed to make the data inaccessible.

How the community answered

(37 responses)
  • A
    8% (3)
  • B
    78% (29)
  • C
    11% (4)
  • D
    3% (1)

Why each option

The best advantage of using tape encryption with unique keys for expiring tapes is that destroying the specific encryption key renders the data inaccessible without needing physical reformatting.

ATapes that are expired only need to be reformatted to make the data inaccessible.

Reformatting a tape might erase the data, but it is a more time-consuming process than key destruction, and without encryption, data might still be forensically recoverable.

BTapes that are expired only need the keys destroyed to make the data inaccessible.Correct

If tape backups are encrypted with unique keys per job or tape, then destroying the specific encryption key associated with an expired tape effectively makes the data on that tape cryptographically inaccessible. This method provides secure data sanitization without requiring the time-consuming process of physically reformatting or destroying the tape media.

CTapes that are expired only need to be overwritten without reformatting to make the data

Overwriting without reformatting is a method of data sanitization, but the primary and most efficient advantage of *encryption with unique keys* for data destruction is the destruction of the key itself, not necessarily the overwrite process.

DTapes that are expired must be degaussed to make the data inaccessible.

Degaussing is a physical destruction method for magnetic media, which is a more extreme and often unnecessary measure when robust encryption and key destruction policies are in place for logical data sanitization.

Concept tested: Data destruction via encryption key management

Source: https://learn.microsoft.com/en-us/compliance/regulatory/offsite-data-management-best-practices

Topics

#Tape encryption#Data disposal#Key management#Data security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SG0-001 Practice