220-1102 Security Practice Question
A company is decommissioning several old workstations that contain sensitive client data. The hard drives will be disposed of. The company's data security policy requires that data be rendered unrecoverable. Which of the following methods would BEST achieve this goal?
⚠ Common exam trap
Many exam-takers confuse 'data removal' with 'data destruction,' assuming that a standard format or file deletion permanently erases data, when in fact those methods only remove logical pointers and leave the underlying data recoverable.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Degaussing the hard drives.
Degaussing uses a powerful magnetic field to completely randomize the magnetic domains on the hard drive platters, effectively destroying both the stored data and the drive's servo tracks, making data recovery impossible. This method is the only option that renders data unrecoverable in compliance with a policy requiring absolute destruction of sensitive client data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Performing a standard format of the drive.
Why it's wrong here
A standard format only initializes the filesystem structures—boot sector, file allocation tables, and root directory—while leaving the underlying data sectors untouched. Unlike a low-level format or a secure erase operation, it writes no pattern of 0s or 1s over user data, so the previous contents remain physically present. Forensic recovery tools can reconstruct files from these remnant sectors, meaning a standard format is inadequate for protecting sensitive information on decommissioned workstations.
- ✗
Running the 'del' command on all files.
Why it's wrong here
Running the del command removes the directory entries that map filenames to clusters, effectively marking the occupied space as available, but it does not overwrite the data in those clusters. The actual bytes of each deleted file stay on the platters until future writes happen to reuse the same sectors, and recovery tools can perform file carving based on headers and file structure. For sensitive data, this is no more secure than merely deleting the icon; degaussing or cryptographic erase is required.
- ✓
Degaussing the hard drives.
Why this is correct
Degaussing sweeps the hard drive with a powerful alternating magnetic field that randomizes the orientation of magnetic domains on the platters. This process irreversibly destroys the servo tracks, sector timing, and all recorded user data, making any residual content unintelligible even with specialized forensic equipment. Because it eliminates the physical magnetic structure itself, degaussing is an accepted method for decommissioning magnetic hard drives containing sensitive data.
- ✗
Reinstalling the operating system.
Why it's wrong here
Reinstalling the operating system typically creates a new OS partition, writes boot files, and lays down system files, but the installer is not designed to perform media sanitization of every sector. The setup may only perform a quick format that clears the file system indexes while leaving user data in unallocated space, and even a full format does not guarantee a complete overwrite. If the drive previously stored sensitive information, remnants could be extracted from unallocated sectors, so reinstallation is not sufficient for decommissioning.
Go deeper
Related to this question
Learn chapter
Basic Compliance: GDPR, HIPAA, PCI-DSS
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Security policy
A security policy is a formal set of rules and guidelines that an organization establishes to protect its information assets and technology resources.
About these practice questions
One of 925 original 220-1102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1102 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1102 exam.