Examkin

Question

Difficulty: MediumData Destruction and Disposal Methods

An IT administrator is preparing to reassign several high-performance NVMe solid-state drives (SSDs) from a server handling confidential financial data to an internal lab environment with lower security requirements. To comply with NIST SP 800-88 sanitization guidelines and ensure the drives remain operational for reuse, which method should the administrator employ?

  1. Execute a Cryptographic Erase (CE) or built-in drive vendor sanitization command.Answer
  2. B
    Pass the drives through a high-power magnetic degaussing coil.
  3. C
    Perform a standard full format using the Windows Disk Management tool.
  4. D
    Apply a multi-pass zero-fill overwrite utility designed for magnetic disk drives.

Answer

Execute a Cryptographic Erase (CE) or built-in drive vendor sanitization command.
Executing a Cryptographic Erase (CE) or using firmware-level sanitization commands (such as NVMe Format with Sanitize command) is the NIST-approved method for purging data on self-encrypting solid-state drives. It securely destroys the data encryption key (DEK) within seconds, rendering all stored blocks unreadable while preserving the drive's operational integrity for reuse.

Step-by-Step Solution

1
Identify the media type and goal.
The target media consists of solid-state drives (SSDs) that must be sanitized (purged) of sensitive data while remaining reusable.
Different storage technologies require specific sanitization mechanisms according to standards such as NIST SP 800-88.
2
Evaluate sanitization methods compatible with solid-state storage.
Flash-based storage requires firmware-level commands (such as Cryptographic Erase or NVMe Format / ATA Secure Erase) because software-level overwriting cannot address wear-leveled or reserved NAND blocks.
Degaussing is ineffective on flash memory, and multi-pass overwriting induces unnecessary hardware wear while leaving hidden wear-leveled blocks untouched.
3
Select the optimal method for secure purge and hardware reuse.
Cryptographic Erase instantly renders encrypted data inaccessible by destroying the media encryption key, preparing the drive safely for redeployment.
Cryptographic Erase meets regulatory purge requirements efficiently without degrading flash endurance.

Key Concept

SSD Data Sanitization and Cryptographic Erase
Rate this question

Topics

Data Destruction and Disposal Methods

More questions from this topic