CAS-001 · Question #330
In developing a new computing lifecycle process for a large corporation, the security team is developing the process for decommissioning computing equipment. In order to reduce the potential for…
The correct answer is D. Physical destruction E. Drive wipe. When decommissioning equipment, the goal is to ensure data cannot be recovered by any means. Physical destruction (shredding, degaussing, or incineration) renders the storage medium completely unreadable - no software tool can recover data from a physically destroyed drive…
Question
In developing a new computing lifecycle process for a large corporation, the security team is developing the process for decommissioning computing equipment. In order to reduce the potential for data leakage, which of the following should the team consider? (Select TWO).
Options
- AErase all files on drive
- BInstall of standard image
- CRemove and hold all drives
- DPhysical destruction
- EDrive wipe
How the community answered
(35 responses)- A3% (1)
- C6% (2)
- D91% (32)
Explanation
When decommissioning equipment, the goal is to ensure data cannot be recovered by any means. Physical destruction (shredding, degaussing, or incineration) renders the storage medium completely unreadable - no software tool can recover data from a physically destroyed drive. Drive wiping (also called secure erase or DoD 5220.22-M overwriting) writes random data over all sectors multiple times, making forensic recovery infeasible. Together, these are the two industry-standard methods for data sanitization. Option A (erasing files) only removes file system pointers - the underlying data remains on disk and is trivially recoverable with basic tools. Option B (reinstalling an OS) overwrites the OS partition but leaves other data intact. Option C (removing and holding drives) simply relocates the risk rather than eliminating it - the data still exists on the drives.
Topics
Community Discussion
No community discussion yet for this question.