A company is preparing to decommission an offline, non-networked root certificate server. Before
sending the server’s drives to be destroyed by a contracted company, the Chief Security Officer
(CSO) wants to be certain that the data will not be accessed. Which of the following, if
implemented, would BEST reassure the CSO? (Select TWO).

A.
Disk hashing procedures

B.
Full disk encryption

C.
Data retention policies

D.
Disk wiping procedures

E.
Removable media encryption

Explanation:
B: Full disk encryption is when the entire volume is encrypted; the data is not accessible to
someone who might boot another operating system in an attempt to bypass the computer’s
security. Full disk encryption is sometimes referred to as hard drive encryption.
D: Disk wiping is the process of overwriting data on the repeatedly, or using a magnet to alter the
magnetic structure of the disks. This renders the data unreadable.