Examkin

Question

Difficulty: HardData Destruction and Disposal Methods

An organization is preparing to decommission an enterprise storage array equipped with NVMe Solid-State Drives (SSDs) that held proprietary source code. Security policy requires media sanitization to a Purge standard to allow drive reuse within a lower-security tier. A technician proposes applying a commercial degaussing wand to the drives followed by a standard single-pass zero-fill overwrite. Which of the following technical evaluations best explains why this proposed sanitization plan is flawed?

  1. Degaussing is ineffective on flash memory storage, and software overwriting cannot reliably target data stored in wear-leveling reserves or bad block pools.Answer
  2. B
    Degaussing permanently destroys the NAND flash controller firmware, which prevents the drive from executing the mandatory second-pass zero-fill overwrite.
  3. C
    Degaussing is required for solid-state storage to clear persistent electrical charges, but a single-pass zero-fill must be replaced by low-level OS formatting.
  4. D
    Degaussing successfully purges all logical data sectors on solid-state drives, making the subsequent software overwrite redundant for compliance.

Answer

Degaussing is ineffective on flash memory storage, and software overwriting cannot reliably target data stored in wear-leveling reserves or bad block pools.
The option identifying that degaussing is ineffective on flash memory and that software overwriting cannot reach wear-leveling reserves is correct. SSDs store data using electrical charges in NAND flash cells, which are immune to magnetic degaussing. Furthermore, standard zero-fill overwrite software operates on logical block addresses (LBAs) provided by the OS and cannot sanitize data residing in over-provisioned blocks, retired sectors, or wear-leveling pools managed internally by the SSD controller. Sanitizing SSDs for reuse requires hardware-level commands such as NVMe Sanitize or cryptographic erase.

Step-by-Step Solution

1
Analyze the physical media type specified in the scenario.
The storage devices are NVMe Solid-State Drives (SSDs), which utilize NAND flash semiconductor technology rather than magnetic platters.
Data destruction techniques depend strictly on the underlying physical storage technology.
2
Evaluate the effectiveness of degaussing on solid-state drives.
Degaussing uses high-density magnetic fields to disrupt magnetic domains on HDDs and tapes. Because SSDs store data electronically in floating-gate or charge-trap flash memory cells, degaussing has zero effect on SSD data retention.
Applying magnetic sanitization to non-magnetic media fails to sanitize the data.
3
Evaluate standard software overwriting (zero-fill) on flash storage architectures.
SSDs use wear-leveling algorithms, over-provisioned space, and dynamic block mapping. Standard OS-level zero-fill software only writes to logically exposed sectors and cannot access hidden, wear-leveled, or bad block pools managed internally by the SSD controller.
Achieving a true Purge on SSDs for reuse requires specialized controller commands such as NVMe Sanitize or ATA Secure Erase rather than standard sector overwriting.

Key Concept

Selecting media-appropriate data sanitization and disposal methods for magnetic versus solid-state media.
Rate this question

Topics

Data Destruction and Disposal Methods

More questions from this topic