Question

Difficulty: HardData Destruction and Disposal Methods

Match each data sanitization or disposal technique to the media type and operational context where it is most appropriately applied according to CompTIA security standards.

  • DegaussingSanitizing retired legacy magnetic Hard Disk Drives (HDDs) or tape media by neutralizing their internal magnetic domains.
  • ATA Secure Erase / Drive PurgingSanitizing functional NVMe or SATA SSDs for internal redeployment without causing physical damage to integrated circuits.
  • Cryptographic Erase (CE)Sanitizing Self-Encrypting Drives (SEDs) by destroying the symmetric Media Encryption Key (MEK) stored on the drive controller.
  • Physical ShreddingDisposing of non-functional solid-state drives (SSDs) containing sensitive data where magnetic sanitization methods fail.

Answer

Degaussing pairs with sanitizing legacy magnetic HDDs or tape media; ATA Secure Erase pairs with sanitizing functional NVMe or SATA SSDs for reuse; Cryptographic Erase pairs with sanitizing Self-Encrypting Drives (SEDs) via key destruction; Physical Shredding pairs with disposing of non-functional SSDs.
Each disposal method matches specific physical media traits and hardware goals: Degaussing neutralizes magnetic tracks on HDDs/tapes; ATA Secure Erase uses controller commands to wipe flash blocks on working SSDs for redeployment; Cryptographic Erase zeroizes encryption keys on SEDs; Physical Shredding mechanically destroys damaged flash hardware.

Step-by-Step Solution

1
Analyze underlying storage architecture (magnetic vs. flash vs. encrypted)
Identify that magnetic media (HDDs/tapes) respond to electromagnetic fields, whereas flash drives (SSDs/NVMe) consist of solid-state ICs, and SEDs rely on onboard encryption keys.
Selecting an improper technique, such as degaussing an SSD, fails to sanitize the drive.
2
Evaluate hardware lifecycle intent (re-use vs. total physical destruction)
Functional drives scheduled for reuse require non-destructive firmware purging (ATA Secure Erase), while damaged or end-of-life drives require mechanical destruction (shredding).
Physical destruction renders hardware unusable for future deployment, whereas logical formats are required for drive repurposing.
3
Match specialized crypto-sanitization mechanisms
Destroying the key on a Self-Encrypting Drive (SED) instantly invalidates all stored ciphertext without reading or writing every sector.
Cryptographic Erase relies on hardware-level encryption key destruction for instant, secure drive decommissioning.

Key Concept

Data Destruction and Disposal Methods
Estimated Time:2m 0s
Rate this question