Courseiva

CCNA Data Destruction and Disposal Questions

30 questions · Data Destruction and Disposal · All types, answers revealed

Practice these questionsDomain overviewAll questions
1
MCQhard

A company is decommissioning a data center and must destroy 1000 HDDs and 200 SSDs. The policy mandates that all data be destroyed on-site and that the drives be rendered physically unusable. Which combination of methods is most efficient?

A.Degauss all drives and then recycle them.
B.Use a hard drive shredder to shred all drives.
C.Overwrite all drives with a three-pass wipe.
D.Use a degausser for HDDs and a secure erase for SSDs.
AnswerB

A shredder physically destroys both HDDs and SSDs, meeting the requirement for on-site physical destruction efficiently.

Why this answer

For large-scale on-site destruction, a hard drive shredder can physically destroy both HDDs and SSDs quickly and efficiently. Degaussing works for HDDs but not SSDs, and it does not physically destroy the drives. Overwriting is too time-consuming for 1200 drives.

Practice this question →
2
MCQmedium

A technician is tasked with decommissioning a RAID array of SSDs that stored proprietary source code. The company policy requires that the drives be reused in another department. Which method ensures data is securely removed while preserving the SSDs?

A.Run a full format on each SSD.
B.Use the drive manufacturer's secure erase utility.
C.Degauss the SSDs.
D.Overwrite the drives with zeros three times.
AnswerB

Manufacturer secure erase sends a command that resets all NAND cells, making data unrecoverable while allowing the SSD to be reused.

Why this answer

SSDs require special handling because their wear-leveling and TRIM features can make traditional overwriting unreliable. A secure erase command (ATA Secure Erase) is designed for SSDs to reset all cells to an unallocated state.

Practice this question →
3
MCQmedium

A non-profit organization is upgrading its computers and wants to donate the old ones to a local school. The HDDs contain donor information that must be kept confidential. The organization wants the drives to be reusable. Which method should be used?

A.Use a degausser to erase the drives.
B.Physically drill holes through the drive platters.
C.Perform a full overwrite with zeros using disk-wiping software.
D.Delete all files and empty the recycle bin.
AnswerC

A full overwrite ensures data is unrecoverable while keeping the drive fully functional for the school.

Why this answer

A full overwrite using disk-wiping software destroys data while leaving the drive functional for reuse. Degaussing destroys data but renders the drive unusable. Physical destruction also prevents reuse.

Practice this question →
4
MCQhard

A security auditor discovers that a company's data destruction logs show only a quick format was performed on drives before disposal. The drives contained personally identifiable information (PII). What is the primary risk?

A.The drives may not boot properly after disposal.
B.The drives could be reused without any issues.
C.The PII data is still recoverable from the drives.
D.The drives will no longer hold a magnetic charge.
AnswerC

Quick formatting only removes the file system index; data remains on the drive and can be recovered with data recovery tools.

Why this answer

A quick format only clears the file table, leaving the actual data on the drive. This data can be recovered with simple software tools, exposing PII. Proper destruction (overwrite, degauss, or physical destruction) is required to prevent data recovery.

Practice this question →
5
MCQeasy

A small business is retiring 20 old desktop PCs that contain sensitive customer data. The IT manager wants to ensure the data is unrecoverable before donating the computers to a local school. Which method should be used?

A.Perform a standard format of each hard drive.
B.Use a degausser on each hard drive.
C.Delete all files and empty the Recycle Bin.
D.Run a quick disk cleanup utility.
AnswerB

Degaussing uses a powerful magnetic field to scramble the magnetic domains on the platters, rendering data permanently unrecoverable.

Why this answer

The correct answer is degaussing, which uses a strong magnetic field to destroy the magnetic media on a hard drive, making data recovery impossible. Physical destruction (shredding) is also effective but not listed. Data wiping or formatting leaves data recoverable with forensic tools.

This question tests knowledge of data destruction methods for secure disposal.

Practice this question →
6
MCQeasy

A client brings in a laptop that was used by an employee who left the company. The manager wants to ensure all data is unrecoverable before recycling the laptop. The laptop has a traditional HDD. Which method should be used?

A.Perform a quick format of the drive.
B.Use a degausser to demagnetize the drive.
C.Run a full overwrite using disk-wiping software.
D.Physically shred the drive with a hard drive shredder.
AnswerC

A full overwrite with zeros or random data ensures data is unrecoverable while allowing the drive to be reused.

Why this answer

For traditional HDDs, a full overwrite with zeros or random data (often called wiping) renders the data unrecoverable without special equipment. Degaussing destroys the magnetic field but also renders the drive unusable; physical destruction is extreme; reformatting leaves recoverable data.

Practice this question →
7
MCQmedium

A technician is decommissioning a server that contained encrypted patient health records. The organization's policy requires data to be destroyed beyond recovery, but the server must be returned to the leasing company. Which method should the technician use?

A.Perform a full format of all drives.
B.Use a degausser on the entire server chassis.
C.Remove the hard drives and physically shred them, then return the server without drives.
D.Run a disk cleanup and delete all files.
AnswerC

Physical destruction of the drives ensures data is unrecoverable, and returning the server without drives complies with the leasing agreement.

Why this answer

The correct answer is to remove and physically destroy the hard drives, then return the server without them. Degaussing would also destroy data but may damage the server's electronics. Data wiping is not allowed per policy, and formatting is insecure.

This tests understanding of disposal methods when hardware must be returned.

Practice this question →
8
MCQmedium

A user reports that after a technician recycled an old computer by simply deleting the user profile, the next user found personal documents in the 'Recycle Bin'. Which step was missed in the data disposal process?

A.The technician should have performed a quick format.
B.The technician should have used a data wiping tool that overwrites the free space.
C.The technician should have removed the hard drive and stored it.
D.The technician should have disabled the Recycle Bin.
AnswerB

A wiping tool overwrites the sectors where deleted files reside, making them unrecoverable. This step was missed.

Why this answer

Deleting files and emptying the Recycle Bin does not actually remove data from the drive; it only marks the space as available. Proper sanitization requires overwriting or physical destruction to prevent recovery.

Practice this question →
9
MCQeasy

During a security audit, it is discovered that an old server's hard drives were simply deleted and the server was sold to a recycler. The recycler later reported finding readable files on the drives. Which data disposal standard was violated?

A.NIST SP 800-88
B.PCI DSS
C.HIPAA
D.ISO 27001
AnswerA

NIST SP 800-88 provides guidelines for media sanitization, requiring overwriting or destruction. Deleting files does not meet these standards.

Why this answer

Simply deleting files or formatting does not meet data destruction standards. Proper methods like overwriting, degaussing, or physical destruction are required to ensure data is unrecoverable.

Practice this question →
10
MCQeasy

A customer reports that their old laptop, which they sold online, still contains personal files that the new owner accessed. The customer had only performed a 'Reset this PC' with the 'Remove everything' option. What should the technician recommend to prevent this in the future?

A.Perform a factory reset from the recovery partition.
B.Use a third-party data wiping tool that overwrites the drive multiple times.
C.Remove the hard drive and physically destroy it.
D.Change the user password before selling.
AnswerB

A wiping tool overwrites all sectors with patterns multiple times, making data recovery infeasible.

Why this answer

The correct answer is to use a drive wiping tool that overwrites all data multiple times. The 'Reset this PC' with 'Remove everything' does not securely erase data; it only resets the OS. This scenario highlights the difference between a simple reset and proper data sanitization.

Practice this question →
11
MCQeasy

A small office is decommissioning several SSDs from old laptops. The technician needs to ensure data is destroyed securely and the drives can be resold. Which method is most appropriate?

A.Run a multi-pass overwrite with random data.
B.Use the ATA Secure Erase command.
C.Degauss the SSDs to remove magnetic data.
D.Perform a standard delete and empty the recycle bin.
AnswerB

ATA Secure Erase clears all flash cells to an unprogrammed state, ensuring data is gone and the SSD is reusable.

Why this answer

SSDs require a secure erase command (ATA Secure Erase) to reset all cells to an empty state, making data unrecoverable and the drive reusable. Overwriting SSDs is less effective due to wear leveling, and degaussing can damage the controller.

Practice this question →
12
MCQmedium

A technician is decommissioning a server that contained highly sensitive financial data. The server has multiple HDDs in a RAID array. The company policy requires data destruction to be certified. Which approach is most efficient and secure?

A.Perform a single overwrite on the RAID logical volume.
B.Remove each drive and wipe them individually using a secure erase tool.
C.Degauss the entire server chassis.
D.Reformat the RAID array and reinstall the OS.
AnswerB

Wiping each drive individually ensures all physical sectors are overwritten, regardless of RAID configuration.

Why this answer

For RAID arrays, wiping each individual drive separately ensures that all data is destroyed, as RAID striping distributes data across drives. A single wipe of the logical volume may not cover all physical sectors. Certified destruction often involves physical shredding or secure wiping with verification.

Practice this question →
13
MCQmedium

An organization is moving to a cloud-based system and needs to dispose of several tape backup cartridges that contain years of financial data. The tapes are LTO-5 and are still readable. Which destruction method is most appropriate?

A.Overwrite the tapes with a bulk eraser or degausser.
B.Perform a quick format of the tapes using a tape drive.
C.Reuse the tapes for non-sensitive data after deleting the files.
D.Burn the tapes in an industrial incinerator.
AnswerA

A degausser designed for tape will destroy the magnetic data, making recovery impossible, and is a standard method for tape disposal.

Why this answer

The correct answer is to use a degausser rated for magnetic tape, which will erase the data by randomizing the magnetic particles. Physical destruction (shredding) is also effective but may be more costly. This question tests knowledge that tape media requires specialized degaussers.

Practice this question →
14
MCQmedium

A company is relocating and needs to dispose of 50 old desktop computers with HDDs that contain sensitive client data. The policy requires data destruction to be verifiable and the drives to be physically destroyed. Which method meets these requirements?

A.Use a degausser and then donate the drives to a school.
B.Overwrite each drive with three passes of random data.
C.Send the drives to a certified e-waste recycler for shredding.
D.Reformat each drive and install a fresh OS for reuse.
AnswerC

Shredding physically destroys the drives and a certified recycler can provide a certificate of destruction, satisfying the policy.

Why this answer

Physical destruction methods like shredding or crushing provide verifiable destruction (e.g., through a certificate of destruction) and ensure the drives cannot be reused, meeting strict security policies. Degaussing also destroys data but may not physically destroy the drive.

Practice this question →
15
MCQmedium

A customer brings in a laptop that they want to recycle, but they are concerned about personal data. The laptop has a 256GB SSD and the customer wants to keep the laptop functional for resale. Which method should the technician recommend?

A.Remove the SSD and physically destroy it, then sell the laptop without a drive.
B.Use a degausser on the SSD.
C.Perform a standard format and reinstall Windows.
D.Use the 'Reset this PC' option with the 'Remove everything and clean the drive' setting.
AnswerD

This option performs a secure erase that overwrites all sectors, making data recovery difficult while keeping the laptop functional.

Why this answer

The correct answer is to use the built-in 'Reset this PC' with the 'Remove everything and clean the drive' option, which performs a secure wipe on SSDs. This ensures data is overwritten while keeping the laptop usable. Simple deletion or formatting is insufficient, and physical destruction would make the laptop unusable.

Practice this question →
16
MCQmedium

A company is migrating to new laptops and needs to dispose of 50 old hard drives securely. The drives contain proprietary software and client data. The IT manager wants a method that is both environmentally friendly and compliant with data protection laws. Which disposal method should be chosen?

A.Donate the drives to a local charity after wiping them with a free tool.
B.Use a certified e-waste recycler that offers secure destruction and recycling.
C.Physically break the drives with a drill and dispose of them in the regular trash.
D.Perform a quick format and sell the drives online.
AnswerB

Certified recyclers follow standards for data destruction (e.g., shredding) and recycle materials, meeting both security and environmental goals.

Why this answer

The correct answer is to use a certified e-waste recycler that performs secure data destruction. This ensures data is destroyed (often via shredding or degaussing) and the materials are recycled responsibly. Simple wiping may not be sufficient for all drives, and donating without destruction risks data exposure.

Practice this question →
17
MCQmedium

A user reports that their computer is running slowly and they suspect a virus. After scanning, the technician finds malware that has encrypted several files. The technician decides to wipe the drive and reinstall the OS. What should be done to ensure the malware is completely removed before data destruction?

A.Run a quick format and then reinstall the OS.
B.Use a secure erase utility that overwrites the entire drive including the boot sector.
C.Delete the encrypted files and run a registry cleaner.
D.Use System Restore to revert to a previous state.
AnswerB

Secure erase overwrites all areas, including the boot sector, eliminating persistent malware.

Why this answer

Some malware can persist in the boot sector or firmware. A full wipe of the entire drive (including the boot sector) using a secure erase or low-level format ensures no malware remnants remain. A simple format may leave boot-sector malware intact.

Practice this question →
18
MCQmedium

During a security audit, a technician discovers that an employee used a hammer to destroy several old hard drives. The drives are now in pieces, but the organization's policy mandates 'secure data destruction' for compliance. Which additional step should the technician take?

A.Document the destruction and consider it complete.
B.Use a degausser on the remaining pieces.
C.Visually inspect the platters for scratches and breaks, then shred any intact platters.
D.Run a data recovery tool on the pieces to see if data remains.
AnswerC

Visual inspection ensures platters are damaged; shredding any intact ones guarantees data destruction and meets compliance.

Why this answer

The correct answer is to verify the destruction by inspecting the platters for visible damage and ensuring they are not intact. Hammering may leave platters partially readable. This question tests the concept of verification in data destruction, as physical methods must be confirmed effective.

Practice this question →
19
MCQmedium

A technician is tasked with disposing of a large batch of optical discs (CD-Rs and DVD-Rs) that contain archived customer records. The company policy requires data to be unrecoverable. Which disposal method is most appropriate?

A.Use a degausser to demagnetize the discs.
B.Overwrite the discs with a disk-wiping tool.
C.Shred the discs using an industrial cross-cut shredder.
D.Perform a quick format on the discs.
AnswerC

Shredding physically breaks the discs into small pieces, making data recovery impossible.

Why this answer

Optical discs cannot be overwritten (write-once media). Physical destruction, such as shredding or breaking, is the only reliable way to ensure data is unrecoverable. Degaussing has no effect on optical media.

Practice this question →
20
MCQeasy

A small business is upgrading its workstations and needs to dispose of 20 old hard drives that contain confidential payroll records. The company wants the lowest-cost method that ensures data cannot be recovered. Which disposal method should be recommended?

A.Use a degausser on each drive.
B.Perform a standard format on each drive.
C.Drill holes through the platters of each drive.
D.Reformat the drives and install a fresh OS.
AnswerC

Drilling physically damages the platters, making data unrecoverable at very low cost. This is a common low-budget disposal method.

Why this answer

For cost-sensitive environments with sensitive data, physical destruction is often the most reliable and inexpensive method. Drilling through the platters is a low-cost way to render the drive unreadable without specialized equipment.

Practice this question →
21
MCQhard

A healthcare clinic is disposing of 50 hard drives that contained protected health information (PHI). The compliance officer insists on a method that meets HIPAA requirements and provides a certificate of destruction. Which approach should be taken?

A.Overwrite the drives with zeros and reuse them in non-patient areas.
B.Use a degausser and then recycle the drives as scrap metal.
C.Hire a certified e-waste recycler to physically shred the drives and provide a certificate of destruction.
D.Perform a cryptographic erase if the drives support it.
AnswerC

A certified recycler will shred the drives and issue a certificate, meeting HIPAA requirements and providing audit-proof documentation.

Why this answer

HIPAA requires that PHI be rendered unrecoverable. Many organizations use a certified third-party destruction service that provides a certificate of destruction. Physical shredding is a common compliant method.

Practice this question →
22
MCQeasy

A customer is returning a leased laptop that contains sensitive client data. The lease agreement requires that the data be irrecoverably destroyed, but the laptop must remain functional for the next lessee. Which method should you use?

A.Perform a quick format of the hard drive.
B.Use a degausser to demagnetize the drive.
C.Run a secure erase utility that overwrites all sectors with zeros.
D.Physically shred the hard drive.
AnswerC

Secure erase overwrites every sector, making data unrecoverable while leaving the drive intact and usable for the next lessee.

Why this answer

Data destruction methods vary by need. For this scenario, the drive must stay functional, so physical destruction or degaussing is not appropriate. A secure wipe using a tool that overwrites all sectors is the correct approach because it renders data unrecoverable while preserving the drive's usability.

Practice this question →
23
MCQhard

A technician is tasked with disposing of a failed SSD that contains encrypted financial records. The SSD is non-functional and cannot be powered on. Which method should the technician use to ensure data is destroyed?

A.Use a degausser on the SSD.
B.Perform a secure erase command via SATA interface.
C.Physically shred the SSD using an industrial shredder.
D.Overwrite the SSD with a data wiping tool on another computer.
AnswerC

Physical destruction ensures the NAND chips are broken into small pieces, making data recovery impossible.

Why this answer

The correct answer is physical destruction, such as shredding or crushing the SSD. Because the SSD is non-functional, software-based wiping or degaussing (which is ineffective on SSDs) cannot be used. This tests knowledge that SSDs require different destruction methods than HDDs.

Practice this question →
24
MCQeasy

A technician is disposing of a stack of CDs and DVDs that contain backup data from a medical office. The media are labeled with patient information. Which method should the technician use to destroy the data?

A.Use a degausser on each disc.
B.Scratch the surface of each disc with a key.
C.Use a cross-cut shredder that accepts optical discs.
D.Place the discs in a microwave for 10 seconds.
AnswerC

Cross-cut shredding reduces discs to small pieces, ensuring data is physically destroyed and unrecoverable.

Why this answer

The correct answer is to use a cross-cut shredder designed for optical media. Shredding physically destroys the discs, making data unrecoverable. Degaussing does not work on optical media, and formatting or deleting files is not possible on read-only discs.

Practice this question →
25
MCQhard

An IT manager wants to implement a data destruction policy that meets the U.S. Department of Defense (DoD) 5220.22-M standard for top-secret data. The drives are HDDs and will be reused within the organization. Which method is required?

A.Perform a single overwrite with zeros.
B.Use a degausser and then reformat the drive.
C.Run a three-pass overwrite (zeros, ones, random).
D.Physically destroy the drive with a hammer.
AnswerC

The DoD 5220.22-M standard for top-secret data specifies a three-pass overwrite to ensure data is unrecoverable.

Why this answer

The DoD 5220.22-M standard for top-secret data requires a three-pass overwrite (pass 1: zeros, pass 2: ones, pass 3: random) to ensure data is unrecoverable. A single overwrite may not meet this standard. Degaussing and physical destruction are also acceptable but prevent reuse.

Practice this question →
26
MCQmedium

During a routine hardware refresh, a technician finds a box of old USB flash drives that were used to store temporary project files. The drives are to be given to employees for personal use. What is the most practical way to ensure no project data remains?

A.Delete all files and empty the Recycle Bin.
B.Use a diskpart clean all command to overwrite every sector.
C.Microwave the flash drives to destroy the chips.
D.Reformat the drives with a quick format.
AnswerB

The 'clean all' command writes zeros to every sector, making data unrecoverable while preserving the drive's functionality.

Why this answer

USB flash drives use NAND flash memory, similar to SSDs. A full overwrite with zeros is effective for most flash drives, as it writes to all accessible blocks. However, some drives may have hidden areas, so a secure erase tool is recommended.

Practice this question →
27
MCQmedium

A company is decommissioning a server that contained encrypted customer financial data. The IT manager wants to ensure the data is destroyed without damaging the hard drives, as they will be reused in test environments. Which method should be used?

A.Physically shred the drives.
B.Perform a standard format and reinstall the OS.
C.Issue a cryptographic erase command to the drive's self-encrypting feature.
D.Use a degausser on the drives.
AnswerC

Crypto erase changes the encryption key, rendering all data unreadable. The drive remains usable for testing.

Why this answer

For encrypted drives, a cryptographic erase (crypto erase) is the most efficient method. It destroys the encryption key, making the data inaccessible even if the encrypted data remains on the drive. This preserves the drive for reuse.

Practice this question →
28
MCQhard

A technician is decommissioning a server that uses a hardware RAID controller. The company policy requires that all data be destroyed, but the drives must be returned to the leasing company. Which method ensures data is unrecoverable while preserving the drives?

A.Remove the drives and use a degausser on each one.
B.Perform a secure erase using a bootable utility like DBAN.
C.Use the RAID controller's built-in 'secure erase' or 'low-level format' command.
D.Physically drill through the drive enclosures.
AnswerC

The controller's utility can access all sectors, ensuring complete data removal while keeping drives functional for return.

Why this answer

Hardware RAID controllers often use non-standard sector layouts, making software-based wiping unreliable. The best approach is to use the RAID controller's own low-level format or secure erase utility, which understands the controller's geometry.

Practice this question →
29
MCQhard

A company is migrating to a new cloud-based system and needs to dispose of old tape backup cartridges that contain years of financial data. The tapes are magnetic media. Which disposal method is most appropriate for this media type?

A.Overwrite the tapes with a bulk eraser.
B.Reformat the tapes using a tape drive.
C.Incinerate the tapes in a certified facility.
D.Delete the files from the tape catalog.
AnswerA

A bulk eraser (degausser) is designed for magnetic tape and will completely erase the data. This is the standard method for tape disposal.

Why this answer

Magnetic tape is best destroyed by degaussing, which disrupts the magnetic domains, or by physical shredding. Degaussing is fast and effective for tape, but it renders the tape unusable. Shredding is also acceptable.

Practice this question →
30
MCQhard

A technician is decommissioning a RAID array of 10 hard drives that contained sensitive HR data. The company policy requires that data be destroyed without removing individual drives from the array. Which method is most appropriate?

A.Remove each drive and use a hammer to break the platters.
B.Use a degausser that can accommodate the entire array chassis.
C.Perform a secure erase on each drive via the RAID controller.
D.Reformat the array and reuse it for non-sensitive data.
AnswerB

A degausser can destroy data on all magnetic drives simultaneously without removal, though it may damage the controller—acceptable for decommissioning.

Why this answer

The correct answer is to use a degausser designed for large media, which can destroy data on all drives simultaneously without disassembly. However, this may damage the RAID controller. Alternatively, a bulk eraser could be used.

This question tests understanding of bulk destruction methods for RAID arrays.

Practice this question →

Ready to test yourself?

Try a timed practice session using only Data Destruction and Disposal questions.

Start 20-question session