220-1202 Data Destruction and Disposal — Timed 15 Questions

Question 1

A small business is retiring 20 old desktop PCs that contain sensitive customer data. The IT manager wants to ensure the data is unrecoverable before donating the computers to a local school. Which method should be used?

Accepted Answer

Use a degausser on each hard drive.. The correct answer is degaussing, which uses a strong magnetic field to destroy the magnetic media on a hard drive, making data recovery impossible. Physical destruction (shredding) is also effective but not listed. Data wiping or formatting leaves data recoverable with forensic tools. This question tests knowledge of data destruction methods for secure disposal.

Answer

Perform a standard format of each hard drive.

Answer

Delete all files and empty the Recycle Bin.

Answer

Run a quick disk cleanup utility.

Question 2

A technician is decommissioning a server that contained encrypted patient health records. The organization's policy requires data to be destroyed beyond recovery, but the server must be returned to the leasing company. Which method should the technician use?

Accepted Answer

Remove the hard drives and physically shred them, then return the server without drives.. The correct answer is to remove and physically destroy the hard drives, then return the server without them. Degaussing would also destroy data but may damage the server's electronics. Data wiping is not allowed per policy, and formatting is insecure. This tests understanding of disposal methods when hardware must be returned.

Answer

Perform a full format of all drives.

Answer

Use a degausser on the entire server chassis.

Answer

Run a disk cleanup and delete all files.

Question 3

A customer reports that their old laptop, which they sold online, still contains personal files that the new owner accessed. The customer had only performed a 'Reset this PC' with the 'Remove everything' option. What should the technician recommend to prevent this in the future?

Accepted Answer

Use a third-party data wiping tool that overwrites the drive multiple times.. The correct answer is to use a drive wiping tool that overwrites all data multiple times. The 'Reset this PC' with 'Remove everything' does not securely erase data; it only resets the OS. This scenario highlights the difference between a simple reset and proper data sanitization.

Answer

Perform a factory reset from the recovery partition.

Answer

Remove the hard drive and physically destroy it.

Answer

Change the user password before selling.

Question 4

An organization is moving to a cloud-based system and needs to dispose of several tape backup cartridges that contain years of financial data. The tapes are LTO-5 and are still readable. Which destruction method is most appropriate?

Accepted Answer

Overwrite the tapes with a bulk eraser or degausser.. The correct answer is to use a degausser rated for magnetic tape, which will erase the data by randomizing the magnetic particles. Physical destruction (shredding) is also effective but may be more costly. This question tests knowledge that tape media requires specialized degaussers.

Answer

Perform a quick format of the tapes using a tape drive.

Answer

Reuse the tapes for non-sensitive data after deleting the files.

Answer

Burn the tapes in an industrial incinerator.

Question 5

A customer brings in a laptop that they want to recycle, but they are concerned about personal data. The laptop has a 256GB SSD and the customer wants to keep the laptop functional for resale. Which method should the technician recommend?

Accepted Answer

Use the 'Reset this PC' option with the 'Remove everything and clean the drive' setting.. The correct answer is to use the built-in 'Reset this PC' with the 'Remove everything and clean the drive' option, which performs a secure wipe on SSDs. This ensures data is overwritten while keeping the laptop usable. Simple deletion or formatting is insufficient, and physical destruction would make the laptop unusable.

Answer

Remove the SSD and physically destroy it, then sell the laptop without a drive.

Answer

Use a degausser on the SSD.

Answer

Perform a standard format and reinstall Windows.

Question 6

A company is migrating to new laptops and needs to dispose of 50 old hard drives securely. The drives contain proprietary software and client data. The IT manager wants a method that is both environmentally friendly and compliant with data protection laws. Which disposal method should be chosen?

Accepted Answer

Use a certified e-waste recycler that offers secure destruction and recycling.. The correct answer is to use a certified e-waste recycler that performs secure data destruction. This ensures data is destroyed (often via shredding or degaussing) and the materials are recycled responsibly. Simple wiping may not be sufficient for all drives, and donating without destruction risks data exposure.

Answer

Donate the drives to a local charity after wiping them with a free tool.

Answer

Physically break the drives with a drill and dispose of them in the regular trash.

Answer

Perform a quick format and sell the drives online.

Question 7

During a security audit, a technician discovers that an employee used a hammer to destroy several old hard drives. The drives are now in pieces, but the organization's policy mandates 'secure data destruction' for compliance. Which additional step should the technician take?

Accepted Answer

Visually inspect the platters for scratches and breaks, then shred any intact platters.. The correct answer is to verify the destruction by inspecting the platters for visible damage and ensuring they are not intact. Hammering may leave platters partially readable. This question tests the concept of verification in data destruction, as physical methods must be confirmed effective.

Answer

Document the destruction and consider it complete.

Answer

Use a degausser on the remaining pieces.

Answer

Run a data recovery tool on the pieces to see if data remains.

Question 8

A technician is tasked with disposing of a failed SSD that contains encrypted financial records. The SSD is non-functional and cannot be powered on. Which method should the technician use to ensure data is destroyed?

Accepted Answer

Physically shred the SSD using an industrial shredder.. The correct answer is physical destruction, such as shredding or crushing the SSD. Because the SSD is non-functional, software-based wiping or degaussing (which is ineffective on SSDs) cannot be used. This tests knowledge that SSDs require different destruction methods than HDDs.

Answer

Use a degausser on the SSD.

Answer

Perform a secure erase command via SATA interface.

Answer

Overwrite the SSD with a data wiping tool on another computer.

Question 9

A technician is disposing of a stack of CDs and DVDs that contain backup data from a medical office. The media are labeled with patient information. Which method should the technician use to destroy the data?

Accepted Answer

Use a cross-cut shredder that accepts optical discs.. The correct answer is to use a cross-cut shredder designed for optical media. Shredding physically destroys the discs, making data unrecoverable. Degaussing does not work on optical media, and formatting or deleting files is not possible on read-only discs.

Answer

Use a degausser on each disc.

Answer

Scratch the surface of each disc with a key.

Answer

Place the discs in a microwave for 10 seconds.

Question 10

A technician is decommissioning a RAID array of 10 hard drives that contained sensitive HR data. The company policy requires that data be destroyed without removing individual drives from the array. Which method is most appropriate?

Accepted Answer

Use a degausser that can accommodate the entire array chassis.. The correct answer is to use a degausser designed for large media, which can destroy data on all drives simultaneously without disassembly. However, this may damage the RAID controller. Alternatively, a bulk eraser could be used. This question tests understanding of bulk destruction methods for RAID arrays.

Answer

Remove each drive and use a hammer to break the platters.

Answer

Perform a secure erase on each drive via the RAID controller.

Answer

Reformat the array and reuse it for non-sensitive data.

Question 11

A technician is tasked with decommissioning a RAID array of SSDs that stored proprietary source code. The company policy requires that the drives be reused in another department. Which method ensures data is securely removed while preserving the SSDs?

Accepted Answer

Use the drive manufacturer's secure erase utility.. SSDs require special handling because their wear-leveling and TRIM features can make traditional overwriting unreliable. A secure erase command (ATA Secure Erase) is designed for SSDs to reset all cells to an unallocated state.

Answer

Run a full format on each SSD.

Answer

Degauss the SSDs.

Answer

Overwrite the drives with zeros three times.

Question 12

A user reports that after a technician recycled an old computer by simply deleting the user profile, the next user found personal documents in the 'Recycle Bin'. Which step was missed in the data disposal process?

Accepted Answer

The technician should have used a data wiping tool that overwrites the free space.. Deleting files and emptying the Recycle Bin does not actually remove data from the drive; it only marks the space as available. Proper sanitization requires overwriting or physical destruction to prevent recovery.

Answer

The technician should have performed a quick format.

Answer

The technician should have removed the hard drive and stored it.

Answer

The technician should have disabled the Recycle Bin.

Question 13

During a security audit, it is discovered that an old server's hard drives were simply deleted and the server was sold to a recycler. The recycler later reported finding readable files on the drives. Which data disposal standard was violated?

Accepted Answer

NIST SP 800-88. Simply deleting files or formatting does not meet data destruction standards. Proper methods like overwriting, degaussing, or physical destruction are required to ensure data is unrecoverable.

Answer

PCI DSS

Answer

HIPAA

Answer

ISO 27001

Question 14

A small business is upgrading its workstations and needs to dispose of 20 old hard drives that contain confidential payroll records. The company wants the lowest-cost method that ensures data cannot be recovered. Which disposal method should be recommended?

Accepted Answer

Drill holes through the platters of each drive.. For cost-sensitive environments with sensitive data, physical destruction is often the most reliable and inexpensive method. Drilling through the platters is a low-cost way to render the drive unreadable without specialized equipment.

Answer

Use a degausser on each drive.

Answer

Perform a standard format on each drive.

Answer

Reformat the drives and install a fresh OS.

Question 15

A healthcare clinic is disposing of 50 hard drives that contained protected health information (PHI). The compliance officer insists on a method that meets HIPAA requirements and provides a certificate of destruction. Which approach should be taken?

Accepted Answer

Hire a certified e-waste recycler to physically shred the drives and provide a certificate of destruction.. HIPAA requires that PHI be rendered unrecoverable. Many organizations use a certified third-party destruction service that provides a certificate of destruction. Physical shredding is a common compliant method.

Answer

Overwrite the drives with zeros and reuse them in non-patient areas.

Answer

Use a degausser and then recycle the drives as scrap metal.

Answer

Perform a cryptographic erase if the drives support it.