Which command-line tool can delete the data and prevent recovery of that data in the future?

Which command-line tool can delete the data and prevent recovery of that data in the future?

• A. Wevtutil
• B. Cipher.exe
• C. Clear-EventLog
• D. Auditpol

Answer: (B)

Deleting data in a way that prevents future recovery hinges on data sanitization—actually cleaning the free space so remnants can’t be retrieved by ordinary tools. Cipher.exe provides a secure deletion capability: using it with the /w option overwrites the free space on a volume, effectively erasing leftover fragments of previously deleted files and making recovery far less likely. For example, running cipher /w:C:\ overwrites unused space on the C drive. This is why it’s the best fit for ensuring data can’t be recovered later. The other tools aren’t designed for this purpose. Wevtutil manages Windows Event Logs, not data destruction. Clear-EventLog clears event log files, which removes logs but doesn’t sanitize free space or deleted data. Auditpol adjusts or displays audit policy settings, not data wiping.

Deleting data in a way that prevents future recovery hinges on data sanitization—actually cleaning the free space so remnants can’t be retrieved by ordinary tools. Cipher.exe provides a secure deletion capability: using it with the /w option overwrites the free space on a volume, effectively erasing leftover fragments of previously deleted files and making recovery far less likely. For example, running cipher /w:C:\ overwrites unused space on the C drive. This is why it’s the best fit for ensuring data can’t be recovered later.

The other tools aren’t designed for this purpose. Wevtutil manages Windows Event Logs, not data destruction. Clear-EventLog clears event log files, which removes logs but doesn’t sanitize free space or deleted data. Auditpol adjusts or displays audit policy settings, not data wiping.