mediumMultiple ChoiceObjective-mapped
220-1202 Practice Question: Decommissioning a server that contained encrypted…
A company is decommissioning a server that contained encrypted customer financial data. The IT manager wants to ensure the data is destroyed without damaging the hard drives, as they will be reused in test environments. Which method should be used?
⚠ Common exam trap
A common misconception tested on the CompTIA A+ exam is that a standard format or OS reinstall is sufficient for secure data destruction. However, encrypted data on SEDs remains recoverable unless the encryption key is specifically invalidated via a cryptographic erase command.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Issue a cryptographic erase command to the drive's self-encrypting feature.
The server's hard drives are self-encrypting drives (SEDs) that support the TCG Opal or IEEE 1667 standard. Issuing a cryptographic erase command (e.g., via hdparm --security-erase or a vendor tool) instantly invalidates the media encryption key, rendering all data on the drive permanently inaccessible without physically damaging the drive. This meets the requirement of destroying the encrypted customer financial data while preserving the drives for reuse in test environments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Physically shred the drives.
Why it's wrong here
Physically shredding hard drives is an extremely effective method for absolute data destruction, rendering the storage media completely unusable and unrecoverable. However, this action directly contradicts the implicit requirement of decommissioning, which often involves preparing equipment for potential reuse, resale, or testing. Shredding permanently destroys the physical integrity of the platters or flash memory, making the drive non-functional and impossible to repurpose for any future use.
- ✗
Perform a standard format and reinstall the OS.
Why it's wrong here
Performing a standard format and reinstalling the operating system is insufficient for securely erasing data from an encrypted drive. While formatting creates a new file system and marks sectors as available, it does not overwrite the underlying encrypted data blocks or invalidate the original encryption key. If the encryption key remains accessible or recoverable, the previously encrypted data could still be decrypted and accessed, posing a significant security risk even after a reinstallation.
- ✓
Issue a cryptographic erase command to the drive's self-encrypting feature.
Why this is correct
Issuing a cryptographic erase command to a self-encrypting drive (SED) is the most secure and efficient method for data sanitization while preserving drive functionality. This command instructs the drive's built-in encryption controller to instantly generate and apply a new, random encryption key, effectively rendering all previous data unreadable and irrecoverable with the old key. Since the data itself remains encrypted but inaccessible, the drive can be immediately reused or repurposed without physical destruction or lengthy overwriting processes.
- ✗
Use a degausser on the drives.
Why it's wrong here
Using a degausser, which employs a powerful magnetic field to scramble data on magnetic media, is an unsuitable method for decommissioning modern drives, particularly solid-state drives (SSDs). Degaussing is primarily effective for traditional hard disk drives (HDDs) but can permanently damage the sensitive electronic components and controllers within both HDDs and SSDs, rendering them completely inoperable. Furthermore, degaussing has no effect on the flash memory technology used in SSDs, making it ineffective for data sanitization on these devices.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.