CompTIA Server+ (SK0-005)Server AdministrationHard
A server administrator is tasked with decommissioning an old server that contains sensitive customer data, including credit card numbers and personal identifiable information (PII). The company policy dictates that all data must be irretrievably erased before the server leaves the premises. Which of the following methods BEST ensures data sanitization in compliance with this policy?
- ADeleting all files and emptying the recycle bin.
- BReformatting the hard drives multiple times with a standard OS installation.
- CPhysically destroying the hard drives by degaussing or shredding.
- DPerforming a multi-pass overwrite with a data sanitization utility.
Show answer & explanationAnswer & explanation
Correct answer: C. Physically destroying the hard drives by degaussing or shredding.
For sensitive data requiring irretrievable erasure, physical destruction (degaussing or shredding) of the hard drives is the most secure and reliable method. While multi-pass overwriting is strong, physical destruction offers absolute certainty against data recovery.
Why the other options are wrong
- A. Deleting files and emptying the recycle bin only removes pointers to data, leaving the data itself recoverable.
- B. Reformatting, even multiple times, may leave residual data that can be recovered with specialized tools.
- D. Multi-pass overwriting is a strong software-based sanitization method, but physical destruction offers higher assurance for 'irretrievably erased' data.
Data Sanitization
The process of irreversibly removing or destroying data from a storage medium to make it unrecoverable.
- Wiping: Overwriting data with patterns.
- Degaussing: Using a strong magnetic field to erase data.
- Physical Destruction: Shredding, pulverizing, or incinerating the medium.
Memory trick: Sensitive data needs the strongest wipe.