Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
mediumDrag & DropObjective-mapped
SSCP Practice Question: Drag and drop the steps for properly disposing of…
Drag and drop the steps for properly disposing of a hard drive containing sensitive data into the correct order.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Backup, Overwrite, Verify, Destroy, Document
The proper order for disposing of a hard drive with sensitive data is: first, backup any data that needs to be retained; second, overwrite the entire drive to sanitize it; third, verify that the overwrite was successful using a tool; fourth, physically destroy the drive (e.g., shredding or crushing); and finally, document the process for audit trails and compliance. This sequence ensures data confidentiality and availability of necessary data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Backup, Overwrite, Verify, Destroy, Document
Why this is correct
This is the correct order because you must first backup any necessary data, then overwrite the drive to remove sensitive data, verify the overwrite was successful, physically destroy the drive to ensure data cannot be recovered, and finally document the process for compliance.
- ✗
Overwrite, Verify, Backup, Destroy, Document
Why it's wrong here
This is incorrect because you cannot overwrite before backing up important data, as overwriting would destroy the data you want to keep.
- ✗
Destroy, Backup, Overwrite, Verify, Document
Why it's wrong here
This is incorrect because destroying the drive before backing up would lose important data, and overwriting a destroyed drive is impossible.
- ✗
Backup, Verify, Overwrite, Destroy, Document
Why it's wrong here
This is incorrect because you cannot verify the overwrite before performing it; verification must come after overwriting.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.