SK0-004 · Question #779
A systems administrator needs to ensure data cannot be recovered from old media. Which of the following is the MOST effective method for the administrator to use?
The correct answer is A. Zeroize all sectors. Zeroizing all sectors overwrites every bit on the media with zeros, making original data unrecoverable by any standard forensic method.
Question
A systems administrator needs to ensure data cannot be recovered from old media. Which of the following is the MOST effective method for the administrator to use?
Options
- AZeroize all sectors
- BFormat the media
- CEmpty the recycle bin
- DChange the media format
How the community answered
(68 responses)- A87% (59)
- B3% (2)
- C1% (1)
- D9% (6)
Why each option
Zeroizing all sectors overwrites every bit on the media with zeros, making original data unrecoverable by any standard forensic method.
Zeroizing all sectors performs a low-level overwrite of every addressable sector with zeros (or a pattern), eliminating any remnant magnetic or electronic traces of original data. Unlike logical deletion methods, this physically destroys the data content itself. It is the most effective software-based sanitization method recognized by standards such as NIST SP 800-88.
Formatting only rebuilds the file system metadata and allocation tables; the underlying data blocks remain intact and are easily recoverable with forensic tools.
Emptying the recycle bin removes the OS-level pointer to the file but leaves all data sectors untouched and fully recoverable.
Changing the media format (e.g., FAT32 to NTFS) is a logical operation that restructures the file system without overwriting the raw data sectors.
Concept tested: Media sanitization via sector-level overwrite
Source: https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.