A company is decommissioning a legacy system that stores data on optical media (CDs and DVDs). The data is subject to PCI DSS requirements. Which destruction method is most appropriate for optical media?

Overwriting the optical media with random data.

Using cryptographic erasure on the optical media.

Shredding the optical media using a cross-cut shredder.

A company is retiring a fleet of laptops that contain encrypted SSDs. The company's policy requires that data be destroyed in a way that is both secure and allows the laptops to be resold. Which method is most appropriate?

Degauss the SSDs before resale.

Perform cryptographic erasure by securely deleting the encryption keys, then reset the drives to factory state.

Overwrite the SSDs with a single pass of zeros.

What is the primary purpose of data destruction in the data life cycle?

To anonymize data so it can be used for analytics without identifying individuals

To ensure that data is irretrievably rendered unreadable or unrecoverable when no longer needed

To archive data for long-term retention in a secure format

To free up storage space by deleting files from active systems

Which activity is part of auditing the data destruction process?

Training employees on destruction procedures

Deleting data from active databases

Reviewing destruction logs and certificates of destruction

Choosing the destruction method for each media type

What is a key component of an effective data destruction policy?

Destroying all data immediately upon creation

Defining roles and responsibilities for data destruction activities

Allowing employees to choose their own destruction methods

Documenting only the destruction of physical media

Certified Data Privacy Solutions Engineer

Domain 3Objective 8

Data Destruction CDPSE Practice Questions (Page 6)

Part of the Data Life Cycle Management domain, which accounts for 23% of the CDPSE exam.

37questions here

8free pages

10concepts

23%of the exam

Questions 26–30

26application · medium
A company is decommissioning a legacy system that stores data on optical media (CDs and DVDs). The data is subject to PCI DSS requirements. Which destruction method is most appropriate for optical media?
Select an answer first
27application · medium
A company is retiring a fleet of laptops that contain encrypted SSDs. The company's policy requires that data be destroyed in a way that is both secure and allows the laptops to be resold. Which method is most appropriate?
Select an answer first
28foundation · easy
What is the primary purpose of data destruction in the data life cycle?
Select an answer first
29foundation · easy
Which activity is part of auditing the data destruction process?
Select an answer first
30foundation · easy
What is a key component of an effective data destruction policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CDPSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CDPSE” is a trademark of its owner, used for identification only.