hardMultiple ChoiceObjective-mapped
CISSP Practice Question: Decommissioning a data center and needs to…
A company is decommissioning a data center and needs to dispose of hard drives that contained highly confidential financial data. Which of the following methods provides the HIGHEST assurance that data cannot be recovered?
⚠ Common exam trap
Watch out — candidates often choose degaussing or multi-pass overwriting because they are familiar with these methods, but they fail to recognize that physical destruction is the only method that guarantees data irretrievability across all drive types, especially SSDs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Shredding the drives into small pieces
Shredding the drives into small pieces physically destroys the platters, making data recovery impossible regardless of the storage technology (e.g., HDD vs. SSD). This method provides the highest assurance because it eliminates any possibility of reading residual magnetic or solid-state data, even with advanced forensic tools like electron microscopy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Overwriting the drives with multiple passes of random data
Why it's wrong here
This method involves writing random patterns over the entire storage area multiple times, often following standards like DoD 5220.22-M. While significantly reducing the likelihood of data recovery compared to a single pass, it does not guarantee complete eradication against highly sophisticated forensic techniques. For extremely sensitive data, residual magnetic traces or data in inaccessible areas (e.g., bad sectors remapped by the drive firmware) might still be recoverable.
- ✓
Shredding the drives into small pieces
Why this is correct
Shredding is a physical destruction method that renders the storage media completely unusable and makes data recovery physically impossible. By breaking the platters or flash memory chips into tiny fragments, the integrity of the data storage surfaces is irrevocably destroyed. This method provides the highest level of assurance for data sanitization, making it the most appropriate choice for highly confidential information.
- ✗
Degaussing the drives
Why it's wrong here
Degaussing involves exposing the storage media to a strong magnetic field to disrupt and randomize the magnetic domains, thereby erasing data. However, this method is ineffective for solid-state drives (SSDs) because they store data using electrical charges in flash memory, not magnetic properties. Furthermore, modern high-coercivity hard disk drives may require specialized, powerful degaussers to ensure complete data erasure, and even then, some residual data might persist.
- ✗
Overwriting the drives with a single pass of zeros
Why it's wrong here
A single pass of zeros overwrites the primary data areas but is generally considered insufficient for secure data sanitization, especially for sensitive information. This method may leave recoverable data due to magnetic remanence, where faint traces of the original magnetic patterns can still be detected by advanced forensic tools. Additionally, data might reside in areas not directly addressed by the operating system, such as host protected areas (HPAs) or device configuration overlays (DCOs).
Go deeper
Related to this question
About these practice questions
One of 747 original CISSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.