CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1645

Risk Response and Reporting

Which of the following should a risk practitioner recommend before disposing of server hardware that contains confidential data?

  • A Update the asset inventory
  • B Encrypt the backup
  • C Remove all user access
  • D Destroy the hard drives
Explanation

Hard drives can retain confidential information after a server is retired. Destroying the drives prevents the data from being recovered from the disposed hardware.

Community Discussion

No comments yet. Be the first to start the discussion!