Examkin

Question

Difficulty: Very hardData Destruction and Disposal Methods

An IT security administrator is preparing to return a leased enterprise storage array shelf populated with flash-based NVMe solid-state drives (SSDs) containing confidential financial records. According to organizational compliance policy, all storage media must be sanitized to the NIST SP 800-88 'Purge' standard before transfer. Additionally, the lease contract stipulates that the physical drives must remain fully functional and undamaged upon return to avoid severe financial penalties. Which of the following data disposal actions should the administrator perform to satisfy both constraints?

  1. Perform an NVMe Sanitize block erase or cryptographic erasure command directly via the drive controller firmware.Answer
  2. B
    Pass all NVMe SSDs through a high-coercivity industrial degaussing wand before packaging.
  3. C
    Run a standard operating system full format to write zeroes across all logical block addresses.
  4. D
    Process the drives through an industrial micro-shredder rated for electronic circuit boards.

Answer

Execute an NVMe Sanitize block erase or cryptographic erasure command directly via the drive controller firmware.
Executing a controller-level NVMe Sanitize command (such as block erase or cryptographic erasure on self-encrypting drives) instructs the drive controller to purge all physical NAND flash cells, including over-provisioned space and wear-leveling areas. This fulfills the NIST SP 800-88 'Purge' compliance standard while leaving the physical storage drive functional for return under the lease agreement.

Step-by-Step Solution

1
Analyze the dual requirements of the scenario.
Identified two constraints: 1) Data sanitization level must meet NIST SP 800-88 'Purge' (infeasible laboratory recovery); 2) Physical drives must remain functional to avoid lease penalties.
Choosing a destruction or sanitization method depends on both security compliance level and physical hardware retention requirements.
2
Evaluate candidate sanitization techniques against flash-based NVMe SSD media characteristics.
Degaussing is ineffective for solid-state storage. Physical shredding violates the lease return policy. OS-level zero-fill formatting only meets the 'Clear' standard because wear-leveling algorithms prevent access to hidden over-provisioned blocks.
Solid-state drives manage data layout internally through a Flash Translation Layer (FTL), requiring firmware-level execution to reach all physical NAND cells.
3
Select the correct firmware-level sanitization command.
NVMe Sanitize (block erase / crypto erase) instructs the SSD controller to erase all physical blocks, including over-provisioned space, meeting the 'Purge' standard while preserving drive operational integrity.
Hardware-level sanitize commands provide complete logical purging on flash media without physically damaging the drive.

Key Concept

NIST SP 800-88 Media Sanitization Standards for Solid-State Storage
Estimated Time:2m 0s
Rate this question

Topics

Data Destruction and Disposal Methods

More questions from this topic