CAS-003 · Question #768
A security engineer is managing operational, excess, and available equipment for a customer. Three pieces of expensive leased equipment, which are supporting a highly confidential portion of the…
The correct answer is D. Securely wipe all device memory and store the equipment in a secure location until the end of the. Because the equipment is leased, the organization cannot sell it, permanently dispose of it, or return it early without potentially violating the lease agreement. The equipment processed highly confidential data, so simply relabeling it (A) is insufficient. Returning it to the…
Question
A security engineer is managing operational, excess, and available equipment for a customer. Three pieces of expensive leased equipment, which are supporting a highly confidential portion of the customer network, have recently been taken out of operation. The engineer determines the equipment lease runs for another 18 months. Which of the following is the BEST course of action for the engineer to take to decommission the equipment properly?
Options
- ARemove any labeling indicating the equipment was used to process confidential data and mark it
- BReturn the equipment to the leasing company and seek a refund for the unused time.
- CRedeploy the equipment to a less sensitive part of the network until the lease expires.
- DSecurely wipe all device memory and store the equipment in a secure location until the end of the
How the community answered
(34 responses)- A3% (1)
- B9% (3)
- C3% (1)
- D85% (29)
Explanation
Because the equipment is leased, the organization cannot sell it, permanently dispose of it, or return it early without potentially violating the lease agreement. The equipment processed highly confidential data, so simply relabeling it (A) is insufficient. Returning it to the lessor with residual data (B) is a data exposure risk and likely a contract violation. Redeploying to a less sensitive area (C) still leaves sensitive data at risk if the device is not wiped. The correct approach is to securely wipe all device memory (ensuring no confidential data remains) and then store the equipment in a secure location until the lease naturally expires, at which point it can be properly returned. This satisfies both the contractual obligation (keeping the equipment for 18 months) and the data security requirement (sanitizing it before any reuse or return).
Topics
Community Discussion
No community discussion yet for this question.