220-1102 Operational Procedures Practice Question
A technician has been asked to create a policy for the proper disposal of old hard drives that contain sensitive client data. The policy must ensure that data cannot be recovered even with advanced forensic tools. Which of the following methods should the technician recommend?
⚠ Common exam trap
Many exam-takers confuse a full format with secure erasure, not realizing that a full format only performs a single overwrite pass, which is insufficient against advanced forensic recovery techniques.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Degaussing
Degaussing uses a powerful magnetic field to randomize the magnetic domains on a hard drive's platters, effectively destroying all stored data and rendering the drive unusable. This method meets the requirement that data cannot be recovered even with advanced forensic tools because it physically alters the magnetic media, making any previous data unrecoverable.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Degaussing
Why this is correct
Degaussing destroys the magnetic domains on the platters by applying a powerful, alternating magnetic field, effectively randomizing the stored data and also eliminating the low-level format. This renders the data permanently unrecoverable, even with specialized forensic equipment. However, it also physically damages the drive's mechanism and rendering it unusable, which is why it is a definitive disposal method for magnetic hard drives.
- ✗
Quick format
Why it's wrong here
A quick format only clears the file system metadata, such as the master file table (MFT) or file allocation table (FAT), and marks the entire volume as empty. It does not overwrite the actual data bytes that remain physically on the platters. Data recovery software can easily reconstruct files by scanning for file signatures on these intact clusters, so a quick format is absolutely not a secure disposal method.
- ✗
Deleting partitions
Why it's wrong here
Deleting partitions removes the partition entries from the MBR or GPT, which only erases the logical addressing information that tells the operating system where each partition begins and ends. The raw data inside those partitions remains completely untouched on the disk surfaces. Forensic tools can bypass the missing partition table and scan the raw media for recognizable file structures, allowing recovery of nearly all original data.
- ✗
Full format
Why it's wrong here
A full format performs a surface scan for bad sectors and, depending on the operating system, may overwrite each sector with zeros once. However, this single pass does not meet modern data sanitization standards, and specialized techniques such as magnetic force microscopy or taking advantage of reallocated sectors can recover residual data. Even when every accessible sector is overwritten, shadow data on defective areas or in remapped sectors may survive, so a full format is not a reliable method for certified data destruction.
Go deeper
Related to this question
About these practice questions
This 220-1102 question is part of Courseiva's 925-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1102 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1102 exam.