Discuss WGU WGU Managing Cloud Security (D320) Exam Topic 4 Question 2

A customer requests that a cloud provider physically destroys any drives storing their personal dat

a. What must the provider do with the drives?

AIt should destroy them only if the contract includes hardware disposal insurance.

BIt should use cryptographic erasure to securely remove any personal data from the drives.

CIt should destroy them only if dedicated hardware disposal is specified in the contract.

DIt should use degaussing tools to securely remove any personal data from the drives.

Suggested Answer: C

Cloud providers typically manage multi-tenant infrastructure, where physical hardware is shared among customers. Therefore, drives are not destroyed for each customer unless explicitly required in the contract. If the customer's agreement specifies dedicated hardware disposal, then the provider must comply by physically destroying the drives.

Cryptographic erasure and degaussing are valid sanitization methods, but they may not meet the specific contractual requirement of physical destruction. Insurance clauses are unrelated to disposal.

This question underscores the importance of negotiating contractual terms in cloud agreements. Customers handling highly sensitive or regulated data may require physical destruction, while others may accept logical erasure. Clear agreements ensure both compliance and alignment of security responsibilities.

Get Premium WGU Managing Cloud Security (D320) Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

30 comments · newest first

Daisy 6 months ago

Exactly! B ensures complete data removal. That's crucial.

Celeste 6 months ago

Degaussing is good, but what if the drives are still recoverable?

Alethea 6 months ago

I feel like B is the safest choice. Protects personal data well.

Arlyne 6 months ago

A and C seem too restrictive. The customer should have control.

Cecilia 6 months ago

I agree, but D sounds good too. Degaussing is effective.

Cordelia 7 months ago

I think option B is the best. Cryptographic erasure is secure.

Della 7 months ago

Degaussing is a solid method, but not always foolproof for SSDs!

Felicia 7 months ago

Wait, can they really just destroy drives without a contract clause? Seems risky.

Tasia 8 months ago

Definitely agree, they should destroy the drives if that's what the customer wants!

Aide 8 months ago

I think cryptographic erasure is enough, no need to destroy them.

Bernardo 8 months ago

Degaussing? Cryptographic erasure? What is this, a James Bond movie?

Virgina 8 months ago

This question is a real head-scratcher. I'd need to consult the fine print to be sure.

Brent 8 months ago

C) The contract should specify the disposal method. Can't just destroy drives without that.

Fabiola 8 months ago

D) Degaussing is the industry standard for secure data removal. Gotta go with that.

Leatha 9 months ago

B) Cryptographic erasure is the way to go. Keeps the data secure and the customer happy.

Lashon 9 months ago

I practiced a similar question, and I think the contract does play a role in whether they have to destroy the drives or not.

Judy 9 months ago

I feel like degaussing is an option, but I can't recall if it's the best method for this situation.

Tayna 9 months ago

I remember something about cryptographic erasure, but I don't think that's enough if the customer wants physical destruction.

Truman 9 months ago

I'm pretty confident the answer is B. Cryptographic erasure is the best way to securely remove personal data from the drives, and the question doesn't say the provider has to physically destroy them.

Shawnta 9 months ago

I think the key here is that the customer specifically requested physical destruction of the drives. So B and D aren't enough - the provider needs to actually destroy the drives, which means answer C is probably the best option.

Monroe 10 months ago

I think the provider has to physically destroy the drives, but I'm not sure if it needs to be specified in the contract.

Antonio 10 months ago

Okay, let me think this through. The customer wants the drives destroyed, so I don't think cryptographic erasure is enough. I'm leaning towards C, since the contract would need to specify dedicated hardware disposal.

Alton 10 months ago

The provider must physically destroy the drives if requested.

Alpha 11 months ago

Hmm, I'm a bit confused. Does the question mean the provider has to physically destroy the drives, or just securely remove the data? I'm not sure if B or D is the right answer.

Leonardo 11 months ago

I'm pretty sure the answer is B. The customer wants the provider to physically destroy the drives, so cryptographic erasure seems like the best way to securely remove the personal data.

Martina 5 months ago

↳ replying to Leonardo

I agree with Tegan. It’s about ensuring data is unrecoverable.

Justine 5 months ago

↳ replying to Leonardo

True, but cryptographic erasure can be a good first step.

Tegan 6 months ago

↳ replying to Leonardo

I think B is the right choice too. Secure data removal is crucial.

Rusty 10 months ago

↳ replying to Leonardo

I wonder if they have to specify that in the contract.

Beckie 10 months ago

↳ replying to Leonardo

But isn't physical destruction more effective?

WGU Managing Cloud Security (D320) Exam - Topic 4 Question 2 Discussion