exam questions

Exam 312-49 All Questions

View all questions & answers for the 312-49 exam

Exam 312-49 topic 1 question 117 discussion

Actual exam question from ECCouncil's 312-49
Question #: 117
Topic #: 1
[All 312-49 Questions]

You have completed a forensic investigation case. You would like to destroy the data contained in various disks at the forensics lab due to sensitivity of the case.
How would you permanently erase the data on the hard disk?

  • A. Throw the hard disk into the fire
  • B. Run the powerful magnets over the hard disk
  • C. Format the hard disk multiple times using a low level disk utility
  • D. Overwrite the contents of the hard disk with Junk data
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Bodescu
Highly Voted 2 years, 7 months ago
Fire purifies all, my friends :D
upvoted 5 times
...
manarkmq
Most Recent 4 months, 1 week ago
Methods like hard drive formatting or deleting partitions cannot delete the file data completely. However, it is important to destroy the data and protect it from retrieval, after the collection of evidence from the computer. Therefore, the only way to erase the data completely and protect it from recovery is to overwrite the data by applying a code of sequential zeroes or ones. from the book so it is d
upvoted 1 times
...
ifilko
2 years ago
I think the key is "various disks" - it means not only HDD and SSD, it also can be a CD, DVD, Floppy. The correct answer can be "A" because it is universal and can destroy everything. Low-Level formatting and overwriting is not applicable for DVD-R for example
upvoted 1 times
...
Fabsauro
2 years, 9 months ago
Low-level formatting is a procedure where you write data directly to the storage medium, bypassing the filesystem layer. You do not care if the hard disk has one partition or more, NTFS or BTRFS or anything else. You are using the device driver, which can be IDE or SCSI or SATA or others, and you're writing data to physical sectors. More importantly, low level formatting will write to each and every bit on the storage device, making sure the old states are destroyed forever, and with them, any trace of former data previously stored. Performing one low-level formatting operation is known as one-pass format. Some security consultants and experts and paranoids might recommend you perform three or more passes, to make absolutely sure no trace of old data can ever be retrieved. Statistically, this is a total overkill, but the choice is entirely yours. From: https://www.dedoimedo.com/computers/low-level-formatting.html SHD be C !
upvoted 1 times
Ariel235788
1 year, 11 months ago
formatting does not erase the data completely. you can format a drive and still use forensic tools to pull data off. Even over-writing files you can still pull data. Magnets will be useful if you intend on data destruction but completely 100% destroying the disk is the way to go. Hence, A, cast it into the fire. Incineration means you cant ever use the disk again.
upvoted 1 times
...
...
Cytrail
2 years, 9 months ago
I will go for D. The question is talking about destroying the data, not the drive inclusive. D is the most correct option.
upvoted 1 times
Ariel235788
1 year, 11 months ago
Over writing files is the least secure method of deleting files. that will not resolve 'permanent deletion'. Destruction of the drive is the only way to permanently delete data
upvoted 1 times
...
...
stickerbush1970
2 years, 11 months ago
Running a powerful magnet 'B' would be better than Overwrite with junk data 'C'.
upvoted 1 times
Ariel235788
1 year, 11 months ago
Destruction would ensure complete erasure of data. Even magnets dont get everything
upvoted 1 times
...
...
linuxer
3 years, 7 months ago
based on the original EC-Council material: Methods like hard drive formatting or deleting partitions cannot delete the file data completely. However, it is important to destroy the data and protect it from retrieval, after the collection of evidence from the computer. Therefore, the only way to erase the data completely and protect it from recovery is to overwrite the data by applying a code of sequential zeroes or ones. (EC-Council 81) EC-Council. Computer Hacking Forensics Investigator (CHFI) Version 9 eBook w/ iLabs (Volumes 1 through 4). EC-Council Academia, 01/2017. VitalBook file. The citation provided is a guideline. Please check each citation for accuracy before use. so I think answer would be "D"
upvoted 2 times
...
haymaths
4 years, 3 months ago
A & C are correct
upvoted 2 times
...
Pet
4 years, 6 months ago
Answer shd be C. Format the hard disk multiple times using a low level disk utility
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago