mediumMultiple Select
CISSP Practice Question: Which THREE of the following are valid methods…
Which THREE of the following are valid methods for securely disposing of magnetic hard drives?
⚠ Common exam trap
Candidates often confuse logical deletion or formatting (A, E) with secure sanitization. While deleting and formatting only remove file pointers, overwriting, degaussing, and physical destruction actually sanitize the media by removing or destroying the underlying data.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Physical shredding
Physical shredding (B) is correct because it mechanically destroys the platters into small particles, making any magnetic data recovery physically impossible. Overwriting with random data over multiple passes (C) is correct because it replaces the original magnetic patterns with new data, rendering the previous contents unrecoverable even with laboratory techniques. Degaussing (D) is correct because exposing the drive to a strong magnetic field erases the magnetic alignment on the platters, effectively destroying the data and often rendering the drive unusable. Deleting files and emptying the recycle bin (A) only removes file system references while the data remains on the platters, and quick formatting (E) merely rewrites the file system metadata without overwriting the actual data, so neither is a secure disposal method.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deleting files and emptying recycle bin
Why it's wrong here
Deleting files and emptying the recycle bin performs only a logical deletion. The operating system simply marks the space occupied by the file as available for new data by removing its entry from the file system's index, but the actual data blocks remain physically on the storage medium. This makes the data easily recoverable using standard forensic tools until new data overwrites those specific blocks.
- ✓
Physical shredding
Why this is correct
Physical shredding is a highly secure method that involves mechanically destroying the storage medium itself, such as hard drive platters or solid-state drive NAND flash chips, into tiny, unrecognizable fragments. This renders the data absolutely unrecoverable by any means, as the physical integrity of the storage device is completely obliterated. It is considered the most definitive method for data destruction across various media types.
- ✓
Overwriting with random data (multiple passes)
Why this is correct
Overwriting with random data, especially through multiple passes, is a software-based sanitization technique where new data patterns are written directly over the original data sectors on a storage device. This process aims to obscure any residual magnetic or electrical traces of the previous data, making forensic recovery extremely difficult, if not impossible. Multiple passes enhance security by further randomizing any potential remnants.
- ✓
Degaussing
Why this is correct
Degaussing is a method specifically designed for magnetic storage media, like hard disk drives and magnetic tapes, which uses a powerful alternating or pulsed magnetic field to neutralize the magnetic domains on the platters. This strong magnetic pulse randomizes the alignment of the magnetic particles, effectively erasing all stored data by rendering it unreadable. It is ineffective for non-magnetic media such as Solid State Drives (SSDs).
- ✗
Quick formatting
Why it's wrong here
Quick formatting primarily rebuilds the file system structure, such as the Master Boot Record (MBR) and File Allocation Table (FAT) or equivalent structures, without actively erasing the data blocks themselves. While it makes the drive appear empty to the operating system, the original data remains largely intact on the disk's sectors. Consequently, data recovery software can often easily reconstruct and retrieve the 'formatted' files.
Go deeper
Related to this question
About these practice questions
This CISSP question is part of Courseiva's 816-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.