Participate in the Disposal Process ISSEP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a typical output of a decommissioning and disposal audit?

   • AA list of new hardware to purchase
   • BA marketing report on the organization's sustainability efforts
   • CA summary of employee performance reviews
   • DA certificate of destruction or sanitization
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a key element that should be included in a secure disposal plan?

   • AA schedule of routine maintenance for the systems
   • BA description of the organization's hiring process
   • CA list of all software licenses owned by the organization
   • DA list of personnel authorized to approve and perform disposal activities
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   After a decommissioning project, the security team is reviewing the disposal records. They notice that a certificate of destruction is missing for one of the hard drives. What should the security team do?

   • AInvestigate the missing certificate and determine whether the drive was actually destroyed.
   • BAssume the drive was destroyed because it was listed in the asset inventory as decommissioned.
   • CRequest a new certificate from the disposal vendor without further investigation.
   • DMark the disposal as complete and note the missing certificate in the next audit report.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   After a decommissioning project, the security team is auditing the disposal records. They find that some data was disposed of before the retention period expired. What is the most appropriate action?

   • AAssume the data was not important and move on.
   • BReport the incident to management and determine if the data can be recovered from backups.
   • CIgnore the issue because the data is no longer needed.
   • DDocument the disposal as complete and note the retention issue in the next audit.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of a secure disposal plan?

   • ATo document the history of all data ever stored on the systems
   • BTo provide a marketing strategy for selling used equipment
   • CTo outline the steps, responsibilities, and resources needed to securely dispose of systems and data
   • DTo list the names of all employees who have ever accessed the systems
   Reveal Solution Discussion Select an answer first