CompTIA Security+ (SY0-701)Security OperationsMedium
An organization is decommissioning several hard drives that contained highly classified data. Company policy requires the drives be rendered completely unreadable and physically unusable before disposal. Which method BEST satisfies this requirement?
- APerforming a quick format of each drive
- BPhysically shredding the drives into small fragments
- CDegaussing the drives and reissuing them to a lower-security department
- DRunning a single-pass overwrite of zeros
Show answer & explanationAnswer & explanation
Correct answer: B. Physically shredding the drives into small fragments
Physical destruction such as shredding renders the media completely unusable and unreadable, which is the appropriate sanitization method for highly classified data that must never be reconstructed.
Why the other options are wrong
- A. A quick format only removes file system pointers, leaving data recoverable.
- C. Reissuing degaussed drives risks residual data exposure and contradicts full destruction requirements.
- D. A single overwrite reduces recoverability but does not guarantee destruction of highly classified data.
Data Sanitization / Media Destruction
The process of permanently destroying or erasing data from storage media so it cannot be recovered, ranging from overwriting to physical destruction.
- Clear: logical overwrite; Purge: degaussing/cryptographic erase; Destroy: shredding/incineration
- Highly sensitive data typically requires physical destruction
- NIST SP 800-88 defines sanitization methods and assurance levels
Memory trick: Shred it to confetti so no data ghost remains.