hardMultiple SelectObjective-mapped
CCSP Practice Question: Which THREE of the following are effective data…
Which THREE of the following are effective data sanitization methods for cloud environments?
⚠ Common exam trap
ISC2 often tests the misconception that logical operations like truncation or formatting are sufficient for data sanitization, when in reality they leave data intact at the physical storage layer and require cryptographic erasure or overwriting to meet compliance standards like PCI DSS or HIPAA.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Degaussing magnetic media
Degaussing (A) is effective because it uses a strong magnetic field to completely randomize the magnetic domains on hard disk drives (HDDs), rendering all stored data unrecoverable even with advanced forensic tools. This method is approved for the highest security classifications (e.g., NSA/CSS Policy Manual 9-12) but physically destroys the media's ability to store data, making it suitable only for end-of-life disposal.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Degaussing magnetic media
Why this is correct
Degaussing disrupts magnetic fields.
- ✗
Truncating database tables
Why it's wrong here
Truncation may leave residual data in logs or backups.
- ✓
Cryptographic erasure
Why this is correct
Destroying keys makes data unrecoverable.
- ✓
Overwriting with multiple patterns
Why this is correct
Overwriting destroys data if done correctly.
- ✗
Formatting storage volumes
Why it's wrong here
Formatting often only removes file system pointers.
Go deeper
Related to this question
About these practice questions
One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.