Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Answer is C. Accredited vendors follow industry standards and certified destruction methods for A if the encryption keys are compromised, the data can still be accessed before destruction
C. Use an accredited vendor to dispose of the hard drives Using an accredited vendor ensures that the vendor follows industry best practices and standards for the secure disposal of hard drives. Accreditation typically means that the vendor's processes and capabilities have been vetted and found to be compliant with established standards, significantly reducing the risk of data leakage. While the other options can also contribute to the security of the disposal process, they don't provide the same level of assurance that an accredited vendor does. Encryption (Option A) is useful while the hard drive is in use, but not necessarily when it's about to be destroyed. Degaussing (Option B) is a method of destroying data, but using an accredited vendor might encompass degaussing and other secure methods. Requiring confirmation (Option D) is a good practice but doesn't ensure that the destruction process was securely handled.
B. Require the vendor to degauss the hard drives. The best option to reduce the risk of data leakage when destroying hard drives through a vendor is to "B. Require the vendor to degauss the hard drives." Degaussing is a method of erasing data from hard drives by exposing them to a strong magnetic field, effectively rendering the data unrecoverable. This process ensures that sensitive information stored on the hard drives is thoroughly and irreversibly destroyed. While the other options (implementing an encryption policy, using an accredited vendor, requiring confirmation of destruction) can contribute to data security, requiring the vendor to degauss the hard drives provides a strong technical measure to ensure data is properly and definitively erased before disposal.