SK0-004 · Question #14
Which of the following methods should a technician perform to properly clear a hard drive before disposal?
The correct answer is B. Zero all block sectors. Properly sanitizing a hard drive before disposal requires overwriting every storage block with zeros so that no original data can be recovered.
Question
Which of the following methods should a technician perform to properly clear a hard drive before disposal?
Options
- ADelete the FAT
- BZero all block sectors
- CDelete the partition
- DZero the NTFS journal
How the community answered
(35 responses)- A6% (2)
- B89% (31)
- C3% (1)
- D3% (1)
Why each option
Properly sanitizing a hard drive before disposal requires overwriting every storage block with zeros so that no original data can be recovered.
Deleting the FAT (File Allocation Table) removes only the index of file locations; all underlying data blocks remain intact and are trivially recoverable with common tools.
Zeroing all block sectors overwrites every addressable location on the drive with null bytes, destroying the original bit patterns and making data unrecoverable by standard forensic tools - this method aligns with NIST SP 800-88 guidance on media sanitization and is appropriate for drives being disposed of or repurposed.
Deleting a partition removes only the partition table entry, leaving all data blocks untouched and fully recoverable by any partition recovery utility.
Zeroing the NTFS journal erases only the transaction log, not the data blocks themselves, leaving all stored files intact and recoverable.
Concept tested: Hard drive data sanitization methods before disposal
Source: https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.