The Secure Purge feature operates on specific files that have been identified for deletion within WORM-protected SnapLock volumes. Before the purge operation can be initiated, an external application must first identify the relevant files and mark them with a "purge-eligible" attribute. The volume file secure-purge start command then scans the volume and its snapshots for files with this attribute and permanently deletes them. This marking step is a mandatory precondition for the purge process to function.

A. SnapMirror replication is a data protection feature and is not a prerequisite for running a local Secure Purge operation.

B. Secure Purge is available for FlexVol volumes in both SnapLock Compliance and SnapLock Enterprise modes, not just Compliance.

D. NetApp Volume Encryption (NVE) is compatible with Secure Purge; there is no requirement to disable encryption before purging files.

1. NetApp ONTAP 9.10.1 Documentation, "Data protection and security features", Section: "Securely purging files from SnapLock volumes". This section outlines the workflow: "1. An application identifies the files to be purged. 2. The application marks the files for purging. 3. You run the volume file secure-purge start command..."

2. NetApp Technical Report TR-4572, "NetApp ONTAP SnapLock", Page 13, Section: "Secure Purge". It states, "The secure purge feature enables you to delete specific files that are marked for deletion from a SnapLock volume."