CISSP · Question #169
Refer to the information below to answer the question. Desktop computers in an organization were sanitized for re-use in an equivalent security environment. The data was destroyed in accordance with o
The correct answer is C. Shredding. When a PDA is malfunctioning and data cannot be wiped electronically, physical destruction is required. Shredding provides the most thorough physical destruction of the device and its storage media.
Question
Refer to the information below to answer the question. Desktop computers in an organization were sanitized for re-use in an equivalent security environment. The data was destroyed in accordance with organizational policy and all marking and other external indications of the sensitivity of the data that was formerly stored on the magnetic drives were removed. Organizational policy requires the deletion of user data from Personal Digital Assistant (PDA) devices before disposal. It may not be possible to delete the user data if the device is malfunctioning. Which destruction method below provides the BEST assurance that the data has been removed?
Options
- AKnurling
- BGrinding
- CShredding
- DDegaussing
How the community answered
(36 responses)- A3% (1)
- B6% (2)
- C89% (32)
- D3% (1)
Why each option
When a PDA is malfunctioning and data cannot be wiped electronically, physical destruction is required. Shredding provides the most thorough physical destruction of the device and its storage media.
Knurling is a machining process used to create a textured surface pattern on metal for grip purposes and is not a recognized data destruction or media sanitization method.
Grinding can be used for physical media destruction but is typically applied to hard disk platters; for small PDA solid-state flash memory chips, shredding provides more consistent and complete destruction of all components.
Shredding physically destroys the storage media of a PDA into small fragments, making data recovery virtually impossible regardless of device functionality. This is especially critical for malfunctioning PDAs where software-based wiping cannot be performed, as shredding eliminates the physical substrate on which data resides. It is a widely accepted NIST SP 800-88 compliant destruction method applicable to solid-state and flash-based media found in PDAs.
Degaussing is effective for magnetic media such as traditional hard drives and tapes, but PDAs use solid-state flash memory which is not affected by magnetic fields, making degaussing ineffective for PDA data destruction.
Concept tested: Physical media destruction methods for non-magnetic devices
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-88r1.pdf
Topics
Community Discussion
No community discussion yet for this question.