Exam CISSP topic 1 question 14 discussion

I agree with given answer here "C" Degaussing - once a drive has been degaussed, it can no longer be used. Single Pass - replacing 0s and 1s might not be enough. With the right tools "in theory" some of the data can be recover Muti-Pass - Gives us that "peace of mind" the data has been permanetly deleted.

In this scenario, the goal is to securely remove data while preserving the drive's functionality to get the maximum resale value. Single-pass wipe: Overwrites all data once with random or fixed patterns. Meets many regulatory standards for data sanitization. Leaves the drive intact and operational, making it ideal for resale. Why not the other options? A. Pinning: Refers to mobile device security, like keeping apps or screens in view. Not related to data sanitization. C. Multi-pass wipes: More secure than single-pass but also more time-consuming and can stress the drive, reducing its lifespan. Not necessary for most modern drives due to how data is stored. D. Degaussing: Uses a magnetic field to destroy data — but it also renders the drive inoperable. So, you can’t resell it as functioning equipment.

B. Single-pass wipe Explanation: Security: A single-pass wipe overwrites the data on the hard drive with random or specified data (e.g., all zeroes). This ensures the data is effectively erased and makes it virtually impossible for unauthorized recovery using standard techniques. Drive Functionality: Unlike degaussing or physically destroying the drive, a single-pass wipe preserves the operational integrity of the drive. This allows the hard drive to remain functional, maximizing the resale value to the vendor. Efficiency: A single-pass wipe is faster than multi-pass wiping methods, which perform multiple overwrites. Most modern studies suggest that a single overwrite is sufficient to prevent data recovery on modern drives. Multi-pass wipes: While multi-pass wipes offer slightly higher security, they are overkill for most modern hard drives, as a single-pass wipe is sufficient. Multi-pass wiping also takes significantly more time and could cause unnecessary wear on the drive.

A single-pass wipe securely overwrites all data on a hard drive, rendering it unreadable, while preserving the functionality of the drive. This ensures the prevention of unauthorized data access while allowing the company to resell the drives in working condition for the maximum value.

Degaussing - the HDD can NOT be reused. Single or Multi-Pass that data is erased and the HDD is reusable.

Degaussing is the best option if we are no longer using the drive but since the question i asking "reuse program" therefore C is the best option here.

Degaussing

From the official study guide: Degaussing a hard disk will normally destroy the electronics used to access the data. However, you won’t have any assurance that all the data on the disk has actually been destroyed. Someone could open the drive in a clean room and install the platters on a different drive to read the data. Purging is a more intense form of clearing that prepares media for reuse in less secure environments. It provides a level of assurance that the original data is not recoverable using any known methods. A purging process will repeat the clearing process multiple times and may combine it with another method, such as degaussing, to completely remove the data.

Degaussing basically disabled the drive

D, most secure and the company still get the money

Multi Pass might work for HDD.. but SSD and others does not... for More Money, and IT Security Professional would rather get the money that it takes but keep data safe, therefore Degaussing should always be the answer. Answer D.

The most secure method of data sanitization in this scenario would typically be: D. Degaussing Degaussing involves exposing magnetic storage media to a strong magnetic field to completely erase the data. It's highly secure but renders the drives unusable for data storage. While multi-pass wipes (Option C) can also provide a high level of data sanitization, they may still leave traces of data on the drive, which might be recoverable with specialized techniques

I agree with given answer here "C". Because Question has a limit "The vendor pays more money for functioning drives than equipment that is no longer operational". Degaussing make it can not be used, vendor must magnetizing before reuse. Otherwise I will choose D.

Answer is C

degaussing, which uses a powerful magnetic field to erase data. Degaussing is generally considered the most secure form of data erasure, as it is impossible to recover any data once it has been degaussed.

C- Multi-pass wipes = data sanitization that involves writing over the data on a hard drive multiple times using a specific pattern of data.

Agreed, C