IPA IP 2024 Question 91

A question IPA Japan published in 令和6年度 ITパスポート試験公開問題問91, translated into English. ITPEC is based on the same exams.

Which of the following is the most appropriate measure against information leakage when a PC that is no longer needed in the workplace is disposed of?

a)The file deletion function provided by the OS is used to delete all the data files in the PC.b)All the applications that are installed on the PC are uninstalled.c)All the storage devices that are built into the PC are logically formatted.d)By using dedicated software or other such tools, random data is overwritten a specified number of times in order to erase the contents of all the storage devices that are built into the PC.

Explanation

Overwrite all the built-in storage devices with random data, a specified number of times — only this erases the data itself; the other options leave it recoverable.

Deleting a file or logically formatting a drive only removes or rebuilds the file system's management information, such as the directory entries and the allocation table. The data blocks stay on the medium until something else is written over them, so data recovery tools can read them back from a discarded PC. Overwriting the whole area with random data, using dedicated erasure software, replaces the data itself. Physically destroying the storage device is the other reliable method.

Answer (d)

Why not others:

•(a) — the OS's delete function removes only the files' entries; the contents stay on the disk and recovery software can restore them
•(b) — uninstalling applications removes programs, not the data files, and even the removed programs' data remains on the disk
•(c) — a logical format rewrites only the management area; the old data remains on the medium and can be recovered

Key rule: Before disposing of a PC or a storage medium, erase the data itself, by overwriting the whole area or destroying the device; deleting and formatting only hide the data.

Security · AI-written, may contain errors

Previous Next

Practice this exam

This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.