Which ONTAP feature ensures deleted files cannot be recovered from snapshots or WAFL blocks?

The NetApp ONTAP Secure Purge feature is specifically designed for the permanent and irrecoverable deletion of individual files. When a file is securely purged, ONTAP overwrites the data blocks associated with that file in both the active file system and within all existing Snapshot copies. This process ensures that the data cannot be recovered through any means, including forensic analysis of the disk or by restoring from a snapshot. This is a critical function for meeting stringent data privacy and compliance requirements for data destruction.

A. SnapVault Retention defines policies for how long backup copies are kept; it does not provide a mechanism for securely erasing specific files.

C. Volume Move is a feature for non-disruptively migrating a volume between aggregates; it does not perform secure data erasure.

D. SnapRestore is a feature used to recover data by reverting a volume or file to a previous state from a Snapshot copy, the opposite of secure deletion.

1. NetApp ONTAP 9.12.1 Commands. (2023). volume file secure-purge. NetApp Documentation. "The volume file secure-purge command securely purges a specified file from the active file system and from all Snapshot copies in the volume. After a file is securely purged, its contents cannot be recovered."

2. NetApp Technical Report 4572. (2022). SnapLock and Tamperproof Snapshot Technology in NetApp ONTAP. Section 5.2, Secure Purge. "The secure purge feature provides the ability to securely delete a specific file from the active file system and all Snapshot copies."