FLASH CARDS

7.09 Use common data destruction and disposal methods

  • What is data destruction?

  • Data destruction is the process of completely removing data from storage so it can’t be recovered.

  • Why is data sanitization important before repurposing or recycling media?

  • It ensures no old data is left behind, protecting against unauthorized access.

  • What happens when data is marked as "deleted" on hard drives or SSDs?

  • The data isn’t actually gone; it’s just marked as available for new data, making it recoverable.

  • What is the purpose of erasing/wiping a disk?

  • It overwrites the data on the disk, making it unrecoverable.

  • How effective is erasing/wiping data on SSDs compared to HDDs?

  • It works well on HDDs but is less reliable on SSDs.

  • What is low-level formatting, and how does it sanitize data?

  • It resets a disk to its factory state and may erase data.

  • What is Secure Erase (SE)?

  • Secure Erase removes all data from an HDD and erases SSD data over time.

  • What does Instant Secure Erase (ISE) / Crypto Erase do?

  • It destroys the encryption key on Self-Encrypting Drives, making data inaccessible.

  • How does encryption improve data destruction?

  • Encrypting data and then destroying the encryption key ensures it stays secure.

  • What is physical destruction, and when is it used?

  • Physical destruction (e.g., shredding or incinerating) is used when a device can no longer be reused and must be completely destroyed.

  • What is degaussing, and which media types is it effective on?

  • Degaussing uses magnets to erase data on HDDs but doesn’t work on SSDs or CDs/DVDs.

  • What is a Certificate of Destruction?

  • It’s a document showing the details of the destroyed device and how it was destroyed.

  • When should a Certificate of Recycling be issued?

  • It’s given when data destruction methods like overwriting or crypto-erase confirm data is unrecoverable.

  • What should be considered when physically destroying a disk using hand tools?

  • Wear goggles for safety, but this method may still leave fragments that could be analyzed.

  • What is the best practice for secure data destruction?

  • Use specialized tools or certified vendors to ensure data is fully destroyed.