CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 121


An organization is planning to re-purpose workstations that were used to handle confidential information. Which of the following would be the IS auditor's BEST recommendation to dispose of this information?

Show Answer
Correct Answer: A

To securely re-purpose workstations that previously handled confidential information, the best method is to overwrite the disks with random data. This process ensures that the original data is obscured by new data patterns, making it very difficult to recover any sensitive information. Reformatting the disks or deleting the disk partitions do not sufficiently prevent data recovery, and erasing the disks by degaussing would make the disks unusable for re-purposing. Therefore, overwriting with random data is the most effective method that balances data security with the ability to reuse the hardware.

Discussion

17 comments
Sign in to comment
JacCISAOption: A
Jul 5, 2023

Degaussing is basically to destroy the disc, the key word in that question is to RE PURPOSE. Degaussing will make the disc not repurposable.

Ray81Option: A
Aug 5, 2023

A is the correct answer here. Degaussing will render the disk useless, and that goes against the requirement here, which is to RE-PURPOSE the workstation

crowsaintOption: A
Sep 18, 2023

A is the correct answer here. Degaussing is physical destroy the HDD. The only reusable method is the random data overwrite method. The U.S. Department of Defense also specifies overwriting as standard based on "DoD 5220.22".

MichaelHoangOption: A
Jan 13, 2023

i vote for A. formatting is not secure deletion. Overwriting the data is the secure deletion to ensure that deleted data cannot be recovered.

007GeorgeoOption: A
May 3, 2023

The A is the correct answer for me, Because degaussing doesn't work on SSDs. Degaussing uses a magnetic field to wipe data on a magnetic platter of hard disks and is very expensive

mibg83Option: A
Jun 6, 2023

A. Overwrite the disks with random data. Overwriting the disks with random data is considered the best practice for secure data disposal. This process involves writing random data patterns over the existing data, making it extremely difficult to recover the original information. By overwriting the disks, the confidential information is effectively erased, ensuring that it cannot be easily retrieved or reconstructed.

oldmagicOption: C
Jun 25, 2023

Key word is confidential, no other option but C is acceptable

Ray81
Aug 5, 2023

No, degaussing will render the disk useless, and that goes against the requirement here, which is to RE-PURPOSE the workstation. Correct answer is A

cidigi
Aug 17, 2023

U can use the hard disk after degaussing. It destroys the data not the disk.

ChaBum
Feb 26, 2024

On top of the fact degaussing will render mechanical disks unusable, degaussing only works with magnetic support (tape, magnetic disks), SSD won't be affected, therefore A is the solution.

i91290Option: C
Jun 27, 2023

C is better than A

3008Option: A
Oct 26, 2023

A is answer.

missHOption: C
Apr 8, 2023

Definitely C

MohamedAbdelaalOption: C
Apr 27, 2023

C with no doubt

starzuu
Jun 23, 2023

i dont think its A but idk which one is the right answer. Refer to the following https://security.stackexchange.com/questions/127745/why-use-random-value-when-overwriting-files

starzuuOption: C
Jun 23, 2023

i think its C. A quick google search on this topic revealed that A isn't the right answer for modern disk drives whereas degaussing is characterized as one of the only methods viable for safely removing data from modern drives.

starzuuOption: C
Jun 23, 2023

https://www.google.com/url?sa=t&source=web&rct=j&url=https://www.protondata.com/blog/data-security/what-is-degaussing/&ved=2ahUKEwju7PrS5tj_AhUaUd4KHS2NCkQQFnoECA0QAQ&usg=AOvVaw2r4w8HzJQFM2d0h_cMwqty

fori12Option: A
Mar 27, 2024

disc will be reused , so should A

a84nOption: A
Apr 25, 2024

Answer: A

RS66Option: A
Jun 27, 2024

Re-purpose is the key word. we need to re-use the stations, so degaussing is not an option.