nerdexam
GIAC

GCFA · Question #26

Which of the following is the process of overwriting all addressable locations on a disk?

The correct answer is A. Drive wiping. Drive wiping is the specific process of overwriting every addressable storage location on a disk to prevent data recovery.

Advanced Incident Response & Digital Forensics Fundamentals

Question

Which of the following is the process of overwriting all addressable locations on a disk?

Options

  • ADrive wiping
  • BSpoofing
  • CSanitization
  • DAuthentication

How the community answered

(57 responses)
  • A
    72% (41)
  • B
    7% (4)
  • C
    18% (10)
  • D
    4% (2)

Why each option

Drive wiping is the specific process of overwriting every addressable storage location on a disk to prevent data recovery.

ADrive wipingCorrect

Drive wiping refers specifically to overwriting all addressable locations on a storage medium with new data patterns, rendering previously stored data unrecoverable through normal or forensic means. This is distinct from simply deleting files, which only removes file system pointers while leaving the underlying data intact on the disk sectors.

BSpoofing

Spoofing is a deception technique where an attacker impersonates a trusted identity or source, not a disk data destruction method.

CSanitization

Sanitization is a broader term that encompasses multiple data destruction methods including wiping, degaussing, and physical destruction - it is not limited to overwriting alone.

DAuthentication

Authentication is the process of verifying the identity of a user or system, which is completely unrelated to disk data destruction.

Concept tested: Disk drive wiping and data sanitization methods

Source: https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final

Topics

#drive wiping#disk sanitization#data destruction#overwriting

Community Discussion

No community discussion yet for this question.

Full GCFA Practice