Examkin

Soru

Zorluk: ZorData Destruction and Disposal Methods

A systems administrator is preparing to repurpose several Self-Encrypting Drives (SEDs) from a decommissioned database server that previously held highly confidential patient records. The drives must be sanitized in compliance with organizational policy before being redeployed to a non-sensitive testing environment. Which of the following methods should the administrator execute to instantly render all existing data irrecoverable while keeping the drives fully operational?

  1. Perform a Cryptographic Erase (Crypto-Erase) using the drive vendor's management utility to erase the Media Encryption Key.Cevap
  2. B
    Expose the drives to an industrial degaussing wand to neutralize the magnetic domains across the storage media.
  3. C
    Run a standard full format within the operating system's Disk Management utility to write zeros to all sectors.
  4. D
    Feed the drives through an industrial drive shredder to reduce the physical media to uniform particles.

Cevap

Cryptographic Erase (Crypto-Erase) using the drive vendor's management utility to erase the Media Encryption Key
Performing a Cryptographic Erase (Crypto-Erase) on Self-Encrypting Drives (SEDs) erases or resets the internal Media Encryption Key (MEK). Because all data written to an SED is encrypted at the hardware level, deleting the encryption key makes the existing data instantly and permanently unrecoverable, while resetting the drive to a usable factory state for safe redeployment.

Adım Adım Çözüm

1
Analyze the media type and operational requirements
Identified Self-Encrypting Drives (SEDs) containing confidential data that must be sanitized while preserving hardware functionality for redeployment.
Selection of data disposal methods depends on drive technology (SED/SSD vs. magnetic HDD) and whether the media is destined for reuse or physical destruction.
2
Evaluate sanitization mechanisms compatible with SED reuse
Cryptographic Erase (Crypto-Erase) invalidates or changes the drive's internal Media Encryption Key (MEK).
Without the original encryption key, all stored data blocks become permanent ciphertext (unrecoverable), allowing immediate drive reuse without physical damage.
3
Eliminate inappropriate disposal methods
Degaussing and shredding destroy hardware functionality, while standard OS formatting leaves wear-leveled/over-provisioned blocks intact.
Proper security compliance requires matching sanitization depth with hardware lifecycle goals.

Anahtar Kavram

Cryptographic Erase (Crypto-Erase) on Self-Encrypting Drives (SEDs)
Bu soruyu puanla

Konular

Data Destruction and Disposal Methods

Bu konudan daha fazla soru