CISSP · Question #704
Which of the following is the MOST effective countermeasure against data remanence?
The correct answer is A. Destruction. Data remanence refers to residual data remaining on storage media after deletion; the most effective countermeasure is physical destruction, which ensures no data can ever be recovered.
Question
Options
- ADestruction
- BClearing
- CPurging
- DEncryption
How the community answered
(32 responses)- A94% (30)
- B3% (1)
- C3% (1)
Why each option
Data remanence refers to residual data remaining on storage media after deletion; the most effective countermeasure is physical destruction, which ensures no data can ever be recovered.
Destruction - through methods such as shredding, incineration, or degaussing beyond recovery - physically eliminates the storage medium entirely, making data recovery technically impossible. Unlike software-based methods, destruction leaves no residual magnetic or electronic traces, making it the most absolute and effective countermeasure against data remanence. It is the highest assurance level in NIST SP 800-88 media sanitization guidance.
Clearing overwrites data with non-sensitive patterns and is suitable for reuse within the same organization, but it does not fully eliminate remanence and residual data may still be recoverable with advanced forensic techniques.
Purging (including degaussing or cryptographic erase) provides a higher level of sanitization than clearing and may render data unrecoverable with current technology, but it still does not offer the absolute certainty of physical destruction.
Encryption protects data confidentiality but does not address remanence itself - encrypted remnants of data still physically exist on the media and could potentially be decrypted if the key is ever compromised.
Concept tested: Media sanitization methods and data remanence countermeasures
Source: https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.