QuestionQ146

VerifiedLegal, Risk and Compliance

To comply with regulatory requirements, which of the following secure-erasure methods is available to a cloud customer that uses volume storage under the IaaS service model?

Explanation

Cryptographic erasure sanitizes encrypted volume data by destroying the encryption key, making the data infeasible to recover without physical access to the underlying storage media. Degaussing, demagnetizing, and shredding require physical handling of provider-owned hardware, which an IaaS customer does not control. NIST identifies cryptographic erase as a logical purge technique and specifically addresses its applicability to logical or virtual storage such as cloud storage.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!