ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

Because the hard drives hold data classified as Restricted, the policy demands a sanitization method that makes recovery impossible. NIST SP 800-88 recommends either purging the media with a degausser that destroys magnetic domains or physically destroying it (for example, shredding) to render the platters unusable. Combining degaussing with physical shredding provides both purge and destroy, meeting the strongest assurance level. Merely deleting files, reinstalling an OS, or storing the server does not prevent forensic recovery. A software overwrite utility can satisfy some policies, but degauss plus destruction offers the most definitive guarantee and is preferred when the data is highly sensitive and hardware will be removed from custody.