CISSP Asset Security Practice Question
A security administrator needs to ensure that data stored on a server is unrecoverable after decommissioning. The server uses SSDs. Which sanitization method is MOST appropriate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Physical destruction (shredding)
SSDs cannot be reliably overwritten due to wear leveling; physical destruction or cryptographic erasure is recommended.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Quick format
Why it's wrong here
A quick format operation only removes the file system's pointers to data, marking the storage space as available for new files without actually erasing the underlying data blocks. This process is extremely fast because it bypasses the physical writing of zeros or random data. Consequently, the original data remains largely intact on the drive and can often be easily recovered using common data recovery or forensic tools.
- ✗
Standard overwriting with multiple passes
Why it's wrong here
Standard overwriting methods, even with multiple passes, are unreliable for sanitizing solid-state drives due to their complex internal architecture. SSD controllers employ wear leveling, over-provisioning, and bad block management, which means data written by the host operating system may not always land in the same physical location. This can leave residual data in areas like over-provisioned blocks or remapped bad blocks, making complete data eradication uncertain.
- ✓
Physical destruction (shredding)
Why this is correct
Physical destruction, such as shredding, is the most secure and definitive method for sanitizing solid-state drives. This process involves mechanically breaking the SSD's components, including the NAND flash memory chips where data is stored, into tiny, unrecoverable fragments. By rendering the storage media physically unreadable and non-functional, shredding ensures that data cannot be reconstructed or accessed by any means, providing absolute data destruction.
- ✗
Degaussing
Why it's wrong here
Degaussing works by exposing magnetic media to a strong alternating magnetic field, neutralizing the magnetic domains that store data. However, solid-state drives (SSDs) store data using electrical charges within floating-gate transistors, not magnetic properties. Therefore, applying a magnetic field has no effect on the data stored on an SSD, rendering degaussing completely ineffective for this type of media.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISSP question from scratch — 747 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.