CompTIA Server+ (SK0-005)Server AdministrationMedium
A server administrator is preparing to decommission an old server that contains sensitive customer data. Before physical destruction, the data on the drives must be completely unrecoverable to comply with data privacy regulations. Which of the following methods is the MOST effective for ensuring data sanitization?
- AUsing a data erasure utility to overwrite the data multiple times.
- BDeleting all files and emptying the recycle bin.
- CPerforming a quick format of all disk partitions.
- DPhysically removing the drives from the server.
Show answer & explanationAnswer & explanation
Correct answer: A. Using a data erasure utility to overwrite the data multiple times.
Using a data erasure utility to overwrite data multiple times (e.g., using DoD 5220.22-M standard) is the most effective software-based method to ensure data is unrecoverable, complying with strict data privacy regulations.
Why the other options are wrong
- B. Deleting files and emptying the recycle bin only removes pointers to data, leaving the data itself recoverable with forensic tools.
- C. A quick format only resets the file system structure, not overwriting the actual data, making it easily recoverable.
- D. Physically removing the drives is a necessary step for physical destruction or off-site sanitization, but it doesn't sanitize the data on the drives themselves; they would still contain recoverable data.
Data Sanitization
Data sanitization is the process of irreversibly destroying or altering data on storage media to make it unrecoverable by any means, ensuring compliance with data privacy and security regulations.
- Methods include overwriting, degaussing, and physical destruction.
- Simple deletion or quick format is not sufficient for sanitization.
- Compliance standards (e.g., NIST SP 800-88, DoD 5220.22-M) define acceptable methods.
Memory trick: Overwrite Data Completely for Irreversible Security.