CAS-003 · Question #207
In developing a new computing lifecycle process for a large corporation, the security team is developing the process for decommissioning computing equipment. In order to reduce the potential for…
The correct answer is D. Physical destruction E. Drive wipe. When decommissioning computing equipment, simply deleting files (A) is ineffective because the underlying data remains on the disk and is recoverable with common forensic tools. Installing a standard image (B) may overwrite some space but does not guarantee all previous data is…
Question
In developing a new computing lifecycle process for a large corporation, the security team is developing the process for decommissioning computing equipment. In order to reduce the potential for data leakage, which of the following should the team consider? (Select TWO).
Options
- AErase all files on drive
- BInstall of standard image
- CRemove and hold all drives
- DPhysical destruction
- EDrive wipe
How the community answered
(35 responses)- A3% (1)
- B3% (1)
- C6% (2)
- D89% (31)
Explanation
When decommissioning computing equipment, simply deleting files (A) is ineffective because the underlying data remains on the disk and is recoverable with common forensic tools. Installing a standard image (B) may overwrite some space but does not guarantee all previous data is destroyed. Removing and holding drives (C) keeps the physical drives intact and in the organization's possession, which does not destroy the data. Physical destruction (D) - shredding, degaussing, or crushing drives - ensures data is completely unrecoverable. Drive wiping (E) - using software tools to overwrite every sector of the drive multiple times with random data according to standards such as DoD 5220.22-M or NIST 800-88 - renders data unrecoverable through normal or forensic means. Both methods are accepted industry practices for preventing data leakage from decommissioned hardware.
Topics
Community Discussion
No community discussion yet for this question.