ISC2 Certified Cloud Security Professional (CCSP) Practice Question

In a multi-tenant cloud, physical media is owned by the provider and shared among many customers, so the subscriber must rely on a logical sanitization technique. Cryptographic erase-also called crypto-shredding-renders data unrecoverable by destroying or rendering the encryption keys permanently inaccessible. Because the encrypted data remaining on disk is now unintelligible, the storage space can be safely reallocated without affecting other tenants. Conventional overwriting requires exclusive, low-level access to each physical sector, which cloud customers typically do not receive. Degaussing and physical shredding both demand direct control of the hardware, which the provider will not grant and which would disrupt other customers' data. Therefore, cryptographic erase is the most appropriate choice.