Examkin

Question

Difficulty: Very hardData Destruction and Disposal Methods

An enterprise systems administrator is decommissioning a high-security server room containing legacy magnetic hard disk drives (HDDs) holding regulated customer financial records. Company policy mandates a strict sanitization and disposal workflow adhering to NIST SP 800-88 guidelines and complete chain-of-custody preservation. Place the technician's disposition actions in the correct chronological order from start to finish.

  1. 1Record the drive serial numbers in the asset tracking log and secure the media in tamper-evident containers for transport.
  2. 2Expose the magnetic drives to a high-intensity electromagnetic field using a certified degausser to neutralize drive platters.
  3. 3Feed the demagnetized drives into an industrial mechanical shredder to reduce the hard drive chassis and platters into small fragments.
  4. 4Inspect the shredded waste output to confirm that no platter fragments exceed maximum allowable particle sizes.
  5. 5Obtain a signed Certificate of Destruction linking destroyed serial numbers to the audit log and update the asset management database.

Answer

The correct chronological sequence begins with recording drive serial numbers and securing them in tamper-evident containers, followed by degaussing the magnetic media, mechanically shredding the drives, inspecting shredded fragments for compliance, and finally obtaining a signed Certificate of Destruction to update inventory records.
Proper security lifecycle management requires maintaining strict chain of custody from beginning to end. Serial numbers must first be logged and packaged securely. Magnetic drives are then degaussed to purge data prior to mechanical destruction. Physical shredding follows degaussing to ensure hardware cannot be reconstructed. The shredded residue is visually verified to meet particle size standards, and finally, a signed Certificate of Destruction is executed to update organizational records.

Step-by-Step Solution

1
Establish Chain of Custody & Document Assets
Drive serial numbers are recorded in the compliance tracking log and sealed in tamper-evident packaging prior to movement.
Chain-of-custody tracking must initiate before media leaves its secure operational enclosure to prevent unauthorized loss or theft.
2
Execute Magnetic Sanitization (Degaussing)
The internal magnetic fields on the HDD platters and factory timing tracks are permanently disrupted.
Purging data via degaussing renders data unrecoverable while the drive remains physically intact, ensuring data is safe before destruction machinery handling.
3
Execute Physical Destruction (Mechanical Shredding)
The hard drives are shredded into physical metal debris and particulate matter.
Physical destruction ensures total physical impossibility of drive reassembly or head alignment.
4
Perform Destruction Verification
The physical waste output is verified against compliance particle size specifications.
Verification confirms that the physical destruction step met security standards before issuing formal disposition compliance paperwork.
5
Finalize Compliance Documentation
A Certificate of Destruction is generated, signed, attached to serial number logs, and marked closed in asset management.
Legal and regulatory compliance requires formal documentation signed post-destruction to finalize hardware decommission lifecycle.

Key Concept

Enterprise Media Sanitization Lifecycle & Chain of Custody Protocol
Rate this question

Topics

Data Destruction and Disposal Methods

More questions from this topic