ISC2 Governance, Risk and Compliance (CGRC) Practice Question

Your organization is retiring a database server that stored controlled unclassified information (CUI). According to the decommissioning plan, which action must be performed before the hardware is shipped to a certified recycler to ensure the data cannot be recovered?

  • Skip internal sanitization and rely solely on the recycler's certificate of destruction once they receive the hardware.

  • Securely overwrite all storage media in accordance with an approved sanitization standard and record the verification results.

  • Encrypt the drives with a newly generated key, then turn the encrypted disks over to the recycler.

  • Remove the drives and store them powered off in a locked cabinet for one year before disposal.

ISC2 Governance, Risk and Compliance (CGRC)
Compliance Maintenance
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot