A government agency is decommissioning a system that contains classified information. The agency's policy requires that media be destroyed in a way that prevents any possibility of data recovery. Which method is most appropriate?

Encrypting the media and then disposing of it.

Degaussing the media to destroy the magnetic data.

Physical destruction of the media using a disintegrator.

Overwriting the media with random data multiple times.

Which of the following is a physical destruction method commonly used for disposing of magnetic media?

Overwriting the media with random data

Degaussing the media with a strong magnetic field

Reformatting the media with a quick format

Shredding the media into small particles

What is the primary goal of data sanitization during the decommissioning of hardware?

To encrypt the data and store the key on the same device

To delete files from the recycle bin

To make the data unrecoverable using any known method

To compress the data to save space

A hospital is decommissioning a server that contains patient records. The hospital's policy requires that data be sanitized before disposal. The server uses solid-state drives (SSDs). Which sanitization method is most appropriate?

Format the SSD using the operating system's format command.

Use a secure erase command that is specific to the SSD's firmware.

Overwrite the SSD with random data multiple times.

Degauss the SSD to destroy the data.

What is the primary purpose of a data retention policy?

To provide guidelines for sharing data with external parties

To ensure that all data is deleted immediately after use

To maximize the amount of data stored on backup systems

To specify how long data must be kept and ensure that disposal occurs only after retention periods expire

Information Systems Security Engineering Professional

Domain 5Objective 4

Participate in the Disposal Process ISSEP Practice Questions (Page 5)

Part of the Secure Operations, Change Management and Disposal domain, which accounts for 14% of the ISSEP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

5concepts

14%of the exam

Questions 21–25

21expert · hard
A government agency is decommissioning a system that contains classified information. The agency's policy requires that media be destroyed in a way that prevents any possibility of data recovery. Which method is most appropriate?
Select an answer first
22foundation · easy
Which of the following is a physical destruction method commonly used for disposing of magnetic media?
Select an answer first
23foundation · easy
What is the primary goal of data sanitization during the decommissioning of hardware?
Select an answer first
24expert · hard
A hospital is decommissioning a server that contains patient records. The hospital's policy requires that data be sanitized before disposal. The server uses solid-state drives (SSDs). Which sanitization method is most appropriate?
Select an answer first
25foundation · easy
What is the primary purpose of a data retention policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISSEP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSEP” is a trademark of its owner, used for identification only.