nerdexam
Isaca

CRISC · Question #517

Which of the following is the BEST way to prevent the loss of highly sensitive data when disposing of storage media?

The correct answer is A. Physical destruction. For highly sensitive data, the best way to prevent data loss when disposing of storage media is physical destruction. This method ensures the data can never be recovered or accessed.

Submitted by viktor_hu· Apr 18, 2026Risk Response and Reporting

Question

Which of the following is the BEST way to prevent the loss of highly sensitive data when disposing of storage media?

Options

  • APhysical destruction
  • BDegaussing
  • CData anonymization
  • DData deletion

How the community answered

(29 responses)
  • A
    90% (26)
  • C
    3% (1)
  • D
    7% (2)

Why each option

For highly sensitive data, the best way to prevent data loss when disposing of storage media is physical destruction. This method ensures the data can never be recovered or accessed.

APhysical destructionCorrect

Physical destruction, such as shredding, incineration, or pulverization, renders the storage media completely unusable and ensures that highly sensitive data cannot be recovered by any means. This is the most secure and definitive method for preventing data loss from disposed media.

BDegaussing

Degaussing effectively wipes magnetic media but might not be effective for all types of media (e.g., SSDs) and may not guarantee complete unrecoverability for highly determined adversaries.

CData anonymization

Data anonymization alters data to obscure identity, but the original sensitive data might still exist on the medium.

DData deletion

Simple data deletion typically only removes pointers to data, leaving the actual data recoverable with forensic tools.

Concept tested: Secure data sanitization methods

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-88r1.pdf

Topics

#Data sanitization#Media disposal#Physical destruction#Information asset protection

Community Discussion

No community discussion yet for this question.

Full CRISC Practice