An organization is disposing of a system containing sensitive data and has deleted all files from the hard disk. An IS auditor should be concerned because:
A.
deleted data cannot easily be retrieved.
B.
backup copies of files were not deleted as well.
C.
deleting all files separately is not as efficient as formatting the hard disk.
D.
deleting the files logically does not overwrite the files' physical data.
Logical deletion of a file does not overwrite the physical data of the file, thus creating the risk of data leakage, theft, or misuse if the hard disk falls into the wrong hands.
D. Deleting the files logically does not overwrite the files' physical data.
An IS auditor should be concerned because deleting files from a hard disk logically (e.g., using the delete function) does not necessarily overwrite the files' physical data. Deleted files can potentially be recovered using specialized software or tools unless the data is securely overwritten. This means that sensitive data could still be accessible to unauthorized individuals, posing a significant security risk.
Formatting the hard disk or using secure data erasure methods is a more effective way to ensure that the data is permanently removed and not recoverable. Simply deleting files is not sufficient from a security perspective.
The correcte answer is D , When data is deleted from a hard disk, it is typically only removed from the file allocation table, which means that the space previously occupied by the data is marked as available for reuse. However, the physical data on the disk is not necessarily overwritten at this stage, and it may be possible for someone to recover the deleted data using specialized software. This is a potential security risk, particularly when sensitive data is involved, and it is important to ensure that data is properly erased before disposing of the disk.
D. An IS auditor should be concerned that deleting the files logically does not overwrite the files' physical data. When files are deleted from a hard disk, the data is not actually removed from the disk; instead, the space that the files occupy is marked as available for reuse. This means that sensitive data may still be present on the hard disk, even if the files have been deleted. A determined attacker or a skilled data recovery specialist may be able to recover the deleted data, potentially exposing the organization to data breaches or other security incidents.
yes C, deletion can be compared with formatting of disk where complete day is wiped off but not against overwriting where some other data is restored against the earlier data
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.CISA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Swallows
9 months, 1 week agoblues_lee
11 months, 3 weeks agoJustCisa
1 year, 2 months agooldmagic
1 year, 6 months agomibg83
1 year, 7 months ago007Georgeo
1 year, 8 months ago3008
1 year, 8 months ago3008
1 year, 4 months agoswmasinde
1 year, 8 months agoSRJ13
1 year, 9 months agoDeeplaxmi
2 years, 3 months ago