220-1102 Security Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Quick format

  Why it's wrong here

  A quick format does not erase the data stored on the drive; it merely writes a new file system index, such as a new File Allocation Table (FAT) or NTFS Master File Table, and marks all sectors as available for future use. The actual bits of deleted files remain physically on the platters until overwritten by new data, so specialized data recovery software can easily scan for and reconstruct these remnants. Thus, a quick format leaves the sensitive data fully recoverable and is unacceptable for a security policy that demands irreversible destruction.

• ✗

  Overwrite the drive with zeros

  Why it's wrong here

  Overwriting the drive with zeros writes a uniform binary pattern across every addressable sector, which will destroy most logically stored data. However, modern drives perform internal sector remapping and sparing, meaning some sectors that were reallocated due to manufacturing defects or wear are not accessible to the overwrite process and may still harbor original data. Additionally, forensic tools using magnetic force microscopy can sometimes identify residual magnetic states beneath the zero pattern, especially on a previously written drive. Since the policy requires data to be irrecoverable, degaussing, which randomizes the magnetic domains themselves, is the more secure option.

• ✓

  Degaussing

  Why this is correct

  Degaussing exposes the drive to an extremely strong alternating magnetic field that randomizes the orientation of the magnetic domains on the platters, completely erasing any previously recorded data and rendering the drive unusable for future storage. Unlike overwriting, degaussing destroys the magnetic layer itself, leaving no residual magnetization that forensic techniques could amplify or interpret. This is why degaussing is considered the gold standard for destroying data on magnetic media and is the only method listed that fully satisfies a policy requiring that all data be irrecoverable.

• ✗

  Deleting the partition

  Why it's wrong here

  Deleting a partition only removes the partition entry from the master boot record (MBR) or GUID Partition Table, telling the operating system that the logical space is unallocated; it does not touch the data sectors that lie within that partition. The raw files, directories, and file system metadata remain on the disk and can be recovered by recreating the partition or using partition recovery tools that scan for the original file system signatures. Because the underlying data is left completely intact, partition deletion in no way fulfills the security policy's requirement to make data unrecoverable.

Go deeper

Related to this question