MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Which NIST publication provides government guidelines for media sanitization?
a. NIST SP 800-88
b. NIST SP 800-53
c. ISO 27001
d. NIST SP 800-171
Answer: a. NIST SP 800-88goworkwize
What is the primary goal of secure data destruction?
a. To make data recovery infeasible
b. To permanently delete data from backups
c. To transfer data to another drive
d. To compress files securely
Answer: a. To make data recovery infeasiblegoworkwize
Which of the following is NOT a NIST 800-88 sanitization category?
a. Clear
b. Purge
c. Destroy
d. Retain
Answer: d. Retaingoworkwize
Overwriting data with random patterns is an example of which sanitization method?
a. Clear
b. Purge
c. Destroy
d. Retain
Answer: a. Cleargoworkwize
Which process involves erasing hidden areas like HPA or DCO and performing crypto erase?
a. Clear
b. Purge
c. Destroy
d. Encrypt
Answer: b. Purgegoworkwize
What is the key purpose of the “Destroy” method under NIST SP 800-88?
a. To render storage media physically unusable
b. To keep data intact for auditing
c. To prepare a system for reuse
d. To encrypt files for confidentiality
Answer: a. To render storage media physically unusablegoworkwize
Which secure data destruction method uses magnets to erase data on magnetic media?
a. Degaussing
b. Overwriting
c. Shredding
d. Incineration
Answer: a. Degaussingceo-review
Which method ensures data cannot be recovered by pulverizing or melting the media?
a. Physical destruction
b. Logical erasure
c. Key rotation
d. Password reset
Answer: a. Physical destructionceo-review
What is “cryptographic erasure” according to NIST 800-88?
a. Encrypting data, then deleting encryption keys
b. Encrypting data with reversible keys
c. Password-protecting file folders
d. Backing up data to encrypted media
Answer: a. Encrypting data, then deleting encryption keysgoworkwize
Why is verification essential in secure data destruction?
a. To ensure data is truly unrecoverable
b. To confirm system reboot
c. To authenticate users
d. To generate error logs
Answer: a. To ensure data is truly unrecoverablegoworkwize
What type of media is degaussing ineffective against?
a. SSDs
b. HDDs
c. Tapes
d. Optical disks
Answer: a. SSDsgoworkwize
Which process should precede secure data destruction?
a. Data classification
b. File encryption
c. Cloud migration
d. Password rotation
Answer: a. Data classificationceo-review
What is the primary purpose of a data destruction policy?
a. Establish procedures for secure disposal
b. Set firewall configuration standards
c. Define data storage capacity
d. Schedule user training sessions
Answer: a. Establish procedures for secure disposalceo-review
What can improper data disposal lead to under GDPR?
a. Regulatory fines
b. Software updates
c. Legal immunity
d. Reduced data retention costs
Answer: a. Regulatory finesceo-review
What is the primary risk of reusing devices without sanitization?
a. Residual data exposure
b. Reduced hardware speed
c. Energy inefficiency
d. Data backup delay
Answer: a. Residual data exposureceo-review
Which industry often requires NIST 800-88 compliance for decommissioned hardware?
a. Healthcare
b. Retail
c. Agriculture
d. Tourism
Answer: a. Healthcaregoworkwize
Which step ensures audit-readiness after data destruction?
a. Certificate of destruction
b. Hardware warranty renewal
c. Firewall inspection
d. Disk defragmentation
Answer: a. Certificate of destructiongoworkwize
Which term refers to verifying data erasure on a subset of devices?
a. Representative sampling
b. Full verification
c. Data hashing
d. File checksum
Answer: a. Representative samplinggoworkwize
Which NIST 800-88 method is best for low-sensitivity data?
a. Clear
b. Purge
c. Destroy
d. Encrypt
Answer: a. Cleargoworkwize
What does an “audit-ready certificate” typically include?
a. Device serial number and sanitization method
b. User login records
c. Backup schedule
d. Software license keys
Answer: a. Device serial number and sanitization methodgoworkwize
Which organization suffered from poor IT Asset Disposition (ITAD) leading to fines?
a. Morgan Stanley
b. Facebook
c. Microsoft
d. IBM
Answer: a. Morgan Stanleygoworkwize
What is the benefit of the “Purge + Destroy” approach?
a. Maximized data irrecoverability
b. Reduced electric consumption
c. Simplified software updates
d. Faster device reuse
Answer: a. Maximized data irrecoverabilitygoworkwize
What is the main difference between “Clear” and “Purge”?
a. Level of protection against recovery
b. Physical destruction involved
c. Encryption length
d. Power consumption
Answer: a. Level of protection against recoverygoworkwize
Why should employee training be part of data disposal programs?
a. To prevent accidental data leaks
b. To improve coding skills
c. To optimize hardware speed
d. To monitor user activity
Answer: a. To prevent accidental data leaksceo-review
Which process reshapes the magnetic field of drives to erase data permanently?
a. Degaussing
b. Tunneling
c. Fragmentation
d. Formatting
Answer: a. Degaussingceo-review
Which of the following applies to solid-state drives (SSDs)?
a. Crypto erase is more effective
b. Degaussing works best
c. Shredding is unnecessary
d. Overwriting is sufficient
Answer: a. Crypto erase is more effectivegoworkwize
Why is logging critical during data destruction processes?
a. Provides traceability and accountability
b. Improves system performance
c. Enables data compression
d. Supports network balancing
Answer: a. Provides traceability and accountabilityceo-review
What is a recommended action when in-house disposal is ineffective?
a. Use certified third-party providers
b. Store devices for later use
c. Transfer data to public cloud
d. Disable device encryption
Answer: a. Use certified third-party providersceo-review
What can happen if encryption keys are not properly destroyed?
a. Data can still be decrypted
b. Device becomes inoperable
c. Backup frequency increases
d. File permissions are lost
Answer: a. Data can still be decryptedgoworkwize
What is one environmental impact of physical destruction?
a. Increased electronic waste
b. Reduced cloud dependency
c. Enhanced energy storage
d. Lower power cost
Answer: a. Increased electronic wastegoworkwize
Which method allows safe hardware reuse after sanitization?
a. Clear
b. Destroy
c. Melt
d. Pulverize
Answer: a. Cleargoworkwize
What makes SSD sanitization more complex than HDD?
a. Wear-leveling mechanism
b. Lack of encryption
c. Small storage size
d. Low data density
Answer: a. Wear-leveling mechanismgoworkwize
What is an organization’s first step before data destruction?
a. Identify sensitive data
b. Delete random files
c. Replace user passwords
d. Defragment storage
Answer: a. Identify sensitive dataceo-review
Which step ensures compliance with NIST erasure workflows?
a. Verification
b. Manual reboot
c. Power cycle
d. Network mapping
Answer: a. Verificationgoworkwize
What should organizations document after completing data destruction?
a. Date, method, and operator
b. Firmware version history
c. Network latency results
d. Battery health report
Answer: a. Date, method, and operatorgoworkwize
Which technique should not be relied upon exclusively for secure erasure?
a. Encryption alone
b. Overwriting
c. Degaussing
d. Shredding
Answer: a. Encryption alonegoworkwize
Which type of verification ensures every media item is sanitized?
a. Every instance verification
b. Representative sampling
c. Selective testing
d. Conditional erasure
Answer: a. Every instance verificationgoworkwize
Why are certificates of destruction necessary in finance?
a. To meet legal audit requirements
b. To lower bandwidth costs
c. To auto-renew software licenses
d. To shorten project timelines
Answer: a. To meet legal audit requirementsgoworkwize
What does physical shredding typically eliminate?
a. Reuse potential and storage recovery
b. Backup errors
c. RAM usage
d. Firewall congestion
Answer: a. Reuse potential and storage recoverygoworkwize
What type of standard is NIST 800-88 considered globally?
a. Media sanitization standard
b. Encryption algorithm
c. Data transmission framework
d. Secure bootloader protocol
Answer: a. Media sanitization standardgoworkwize
In what situation is “Destroy” mandatory under NIST?
a. For highly classified or damaged media
b. For user-accessible servers
c. For temporary files
d. For cloud-stored backups
Answer: a. For highly classified or damaged mediagoworkwize
What device disposal method helps minimize e-waste?
a. Purge-only sanitization
b. Physical incineration
c. Disk melting
d. Vibration wiping
Answer: a. Purge-only sanitizationgoworkwize
Which regulatory act aligns with NIST erasure in healthcare?
a. HIPAA
b. FERPA
c. PCI DSS
d. DMCA
Answer: a. HIPAAgoworkwize
What is the first factor to determine proper destruction methods?
a. Data classification level
b. Network type
c. Budget limit
d. Encryption method
Answer: a. Data classification levelceo-review
What is the role of ITAD vendors in data destruction?
a. Securely manage asset disposal
b. Configure network firewalls
c. Manage user accounts
d. Create encryption algorithms
Answer: a. Securely manage asset disposalgoworkwize
What kind of data was compromised in Morgan Stanley’s ITAD incident?
a. Financial client data
b. Social media posts
c. Software source code
d. Medical reports
Answer: a. Financial client datagoworkwize
What is a best practice after physical destruction of data media?
a. Disposal via certified e-waste channels
b. Reuse for internal training
c. Retain for backups
d. Discard with office waste
Answer: a. Disposal via certified e-waste channelsgoworkwize
Which step ensures internal compliance post-disposal?
a. Regular audits and reviews
b. Power optimization
c. Firewall reconfiguration
d. Data deduplication
Answer: a. Regular audits and reviewsceo-review
What happens if organizations fail to verify disposal methods?
a. Data may remain recoverable
b. Devices lose warranty
c. Network speed improves
d. Backups auto-delete
Answer: a. Data may remain recoverablegoworkwize
Why is secure data destruction essential in cybersecurity?
a. Prevents residual data breaches and maintains compliance
b. Increases cloud storage space
c. Boosts system clock accuracy
d. Automates encryption processes
Answer: a. Prevents residual data breaches and maintains complianceceo-review+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info