Data Destruction CDPSE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A healthcare organization is decommissioning a data center and must destroy patient records stored on a mix of magnetic hard drives, solid-state drives (SSDs), and LTO tapes. The organization's policy requires a method that is effective for all three media types and provides verifiable proof of destruction for compliance with HIPAA. Which approach best meets these requirements?

   • APhysically shred all hard drives, SSDs, and tapes using a certified industrial shredder, and obtain a certificate of destruction.
   • BPerform a low-level format on all media, then reuse them for non-sensitive data within the organization.
   • CDegauss all media using a high-coercivity degausser, then physically shred the drives and tapes.
   • DUse cryptographic erasure on the SSDs and overwrite the HDDs and tapes with a single pass of random data.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What should be included in a contract with a cloud service provider regarding data destruction?

   • AA statement that the customer is solely responsible for data destruction
   • BA requirement for the provider to certify that data has been destroyed upon request
   • CAn agreement to destroy data only when the contract ends
   • DA clause allowing the provider to retain data for its own use
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is decommissioning a data center and needs to destroy data on a large number of magnetic tapes. The tapes are no longer needed, and the company wants a cost-effective method that also provides a high level of assurance. Which method is most appropriate?

   • AUse cryptographic erasure on the tapes.
   • BDegauss the tapes using a high-coercivity degausser.
   • COverwrite the tapes with random data multiple times.
   • DPhysically shred the tapes.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the relationship between data retention schedules and data destruction?

   • ARetention schedules prevent data destruction
   • BRetention schedules are used to decide which data to destroy immediately
   • CRetention schedules define how long data must be kept, and destruction occurs after that period expires
   • DDestruction schedules are independent of retention schedules
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the purpose of verifying data destruction?

   • ATo create a backup of the data before destruction
   • BTo determine the cost of the destruction process
   • CTo confirm that data cannot be recovered or reconstructed
   • DTo identify which employees performed the destruction
   Reveal Solution Discussion Select an answer first