Study. uk . com
  1. Home
  2. All questions
  3. Question 149

CISSP study material · question 149 of 500

A media disposal policy lists overwriting, degaussing and shredding as its three sanitization methods. Under NIST SP 800-88 Rev. 2, why is that the wrong framing?

  1. Those are techniques; the three methods are clear, purge and destroy, each achievable by several techniques.
  2. Those are outcomes rather than methods, and the standard names no methods at all.
  3. Those are methods, but the standard names four, adding cryptographic erase as its own method.
  4. Those are methods, but degaussing was removed from the standard entirely.
Show the answer

Answer: A. Those are techniques; the three methods are clear, purge and destroy, each achievable by several techniques.

SP 800-88 Rev. 2 defines three methods - clear, purge and destroy - and treats overwriting, degaussing and shredding as technology-specific techniques that realise them.

Source: NIST SP 800-88 Rev. 2 (NIST) — SP 800-88 Rev. 2 > 3.1 Sanitization Methods

Challenge yourself on this topic → Study as cards