nerdexam
Isaca

CISA · Question #85

Which of the following is the BEST disposal method for flash drives that previously stored confidential data?

The correct answer is B. Destruction. For flash drives containing confidential data, physical destruction is the most secure disposal method to ensure data is irrecoverable.

Submitted by emma.c· Apr 18, 2026Protection of Information Assets

Question

Which of the following is the BEST disposal method for flash drives that previously stored confidential data?

Options

  • AOverwriting
  • BDestruction
  • CCryptographic erasure
  • DDegaussing

How the community answered

(24 responses)
  • A
    17% (4)
  • B
    71% (17)
  • C
    8% (2)
  • D
    4% (1)

Why each option

For flash drives containing confidential data, physical destruction is the most secure disposal method to ensure data is irrecoverable.

AOverwriting

Overwriting can be effective for traditional magnetic media but might not reliably erase all data remnants on flash memory due to wear leveling and over-provisioning characteristics.

BDestructionCorrect

Physical destruction (e.g., shredding, pulverizing) is considered the most secure and definitive method for disposing of flash drives that stored confidential data because it renders the storage media completely unusable and the data irrecoverable, providing the highest assurance against data breaches. Flash memory can be difficult to fully sanitize via software methods.

CCryptographic erasure

Cryptographic erasure relies on encrypting the data and then destroying the encryption key, but if the drive was not initially encrypted, this method is not applicable for existing unencrypted confidential data.

DDegaussing

Degaussing uses strong magnetic fields to scramble data on magnetic storage media (like HDDs), but it is ineffective for flash drives (SSDs, USBs) which store data using solid-state technology.

Concept tested: Secure data disposal methods

Source: https://learn.microsoft.com/en-us/compliance/regulatory/data-handling-security-measures

Topics

#Data sanitization#Flash drive disposal#Confidential data#Information asset protection

Community Discussion

No community discussion yet for this question.

Full CISA Practice