Which action best ensures secure destruction of sensitive data after a penetration test?

• A. Delete the files and empty the recycle bin.
• B. Use a secure data shredding tool to overwrite the data multiple times.
• C. Encrypt the data and delete it.
• D. Format the drive.

Answer: (B)

The key idea here is making data unrecoverable. Simply deleting files and emptying the recycle bin only removes the file metadata; the actual data blocks on the disk often remain and can be recovered with forensic tools. Encrypting the data and then deleting it doesn’t guarantee destruction either, because the ciphertext can still sit on the drive and, if the encryption keys exist elsewhere, the data could be decrypted. Formatting a drive is also not a reliable method, since data can frequently be recovered unless the storage has been thoroughly sanitized. Using a secure data shredding tool that overwrites the data multiple times physically or logically prevents recovery by destroying the remnants across the storage medium and aligns with established sanitization practices. In practice, this approach provides a verifiable, portable way to ensure sensitive information from a penetration test can’t be retrieved later, with additional considerations for SSDs like using secure erase commands or combining with encryption and careful key management.