SY0-501 · Question #217
A dumpster diver recovers several hard drives from a company and is able to obtain confidential data from one of the hard drives. The company then discovers its information is posted online. Which…
The correct answer is D. Using magnetic fields to erase the data. To prevent unauthorized data recovery from discarded hard drives, a company must employ secure data sanitization or destruction methods. Using strong magnetic fields to erase data is a highly effective way to permanently destroy information on magnetic media.
Question
A dumpster diver recovers several hard drives from a company and is able to obtain confidential data from one of the hard drives. The company then discovers its information is posted online. Which of the following methods would have MOST likely prevented the data from being exposed?
Options
- ARemoving the hard drive from its enclosure
- BUsing software to repeatedly rewrite over the disk space
- CUsing Blowfish encryption on the hard drives
- DUsing magnetic fields to erase the data
How the community answered
(21 responses)- A19% (4)
- B5% (1)
- C5% (1)
- D71% (15)
Why each option
To prevent unauthorized data recovery from discarded hard drives, a company must employ secure data sanitization or destruction methods. Using strong magnetic fields to erase data is a highly effective way to permanently destroy information on magnetic media.
Removing the hard drive from its enclosure is merely a physical disassembly step and does nothing to erase or destroy the data stored on the drive's platters, leaving the confidential information fully recoverable.
While using software to repeatedly rewrite over disk space is a valid data sanitization method, degaussing offers a more robust and complete physical destruction for magnetic media, ensuring data is unrecoverable even against advanced forensic techniques, especially if the software wipe was not thoroughly verified or incomplete.
Blowfish encryption protects data while stored, but it is a data protection mechanism, not a data destruction or disposal method. If an encrypted drive is simply discarded and data is recovered, it indicates either a compromised key, ineffective encryption, or data recovery from an unencrypted state, and does not securely prepare the drive for disposal.
Degaussing, which uses strong magnetic fields to scramble the magnetic domains on a hard drive's platters, permanently destroys all data stored on the drive, rendering it unrecoverable by conventional means. This method provides definitive data destruction for magnetic media, preventing exposure from discarded drives.
Concept tested: Secure data destruction methods for magnetic storage media
Source: https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.