nerdexam
EC-Council

312-49 · Question #368

You have completed a forensic investigation case. You would like to destroy the data contained in various disks at the forensics lab due to sensitivity of the case. How would you permanently erase…

The correct answer is A. Throw the hard disk into the fire C. Format the hard disk multiple times using a low level disk utility. Two methods are recognized as permanently destroying hard disk data in this context. Physical destruction via incineration (A) - throwing the disk into fire - destroys the magnetic platters entirely, making data recovery physically impossible. This is a valid method of…

Submitted by jordan8· Apr 18, 2026Disk Forensics

Question

You have completed a forensic investigation case. You would like to destroy the data contained in various disks at the forensics lab due to sensitivity of the case. How would you permanently erase the data on the hard disk?

Options

  • AThrow the hard disk into the fire
  • BRun the powerful magnets over the hard disk
  • CFormat the hard disk multiple times using a low level disk utility
  • DOverwrite the contents of the hard disk with Junk data

How the community answered

(28 responses)
  • A
    93% (26)
  • B
    4% (1)
  • D
    4% (1)

Explanation

Two methods are recognized as permanently destroying hard disk data in this context. Physical destruction via incineration (A) - throwing the disk into fire - destroys the magnetic platters entirely, making data recovery physically impossible. This is a valid method of classified data destruction when handled in a controlled environment such as a certified destruction furnace. Multiple low-level formatting passes using a disk utility (C) implements the principle of secure overwriting: writing patterns of data (zeros, ones, or random data) across every sector multiple times. Standards such as DoD 5220.22-M specify multiple overwrite passes to ensure no residual magnetic trace remains. Running powerful magnets (B) - degaussing - can also be effective on traditional HDDs, but requires a certified degausser with sufficient coercive force; ordinary 'powerful magnets' are often insufficient for modern high-density drives. Overwriting with junk data once (D) may not be thorough enough for sensitive forensic data, as single-pass overwriting can sometimes leave recoverable remnants depending on the drive technology.

Topics

#Data Destruction#Data Sanitization#Disk Erasure

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice