CISA · Question #85
Which of the following is the BEST disposal method for flash drives that previously stored confidential data?
The correct answer is B. Destruction. For flash drives containing confidential data, physical destruction is the most secure disposal method to ensure data is irrecoverable.
Question
Which of the following is the BEST disposal method for flash drives that previously stored confidential data?
Options
- AOverwriting
- BDestruction
- CCryptographic erasure
- DDegaussing
How the community answered
(24 responses)- A17% (4)
- B71% (17)
- C8% (2)
- D4% (1)
Why each option
For flash drives containing confidential data, physical destruction is the most secure disposal method to ensure data is irrecoverable.
Overwriting can be effective for traditional magnetic media but might not reliably erase all data remnants on flash memory due to wear leveling and over-provisioning characteristics.
Physical destruction (e.g., shredding, pulverizing) is considered the most secure and definitive method for disposing of flash drives that stored confidential data because it renders the storage media completely unusable and the data irrecoverable, providing the highest assurance against data breaches. Flash memory can be difficult to fully sanitize via software methods.
Cryptographic erasure relies on encrypting the data and then destroying the encryption key, but if the drive was not initially encrypted, this method is not applicable for existing unencrypted confidential data.
Degaussing uses strong magnetic fields to scramble data on magnetic storage media (like HDDs), but it is ineffective for flash drives (SSDs, USBs) which store data using solid-state technology.
Concept tested: Secure data disposal methods
Source: https://learn.microsoft.com/en-us/compliance/regulatory/data-handling-security-measures
Topics
Community Discussion
No community discussion yet for this question.