Study. uk . com
  1. Home
  2. All questions
  3. Question 156

CISSP study material · question 156 of 500

A standard operating procedure still requires seven overwrite passes citing an old defence manual. Which two points does NIST SP 800-88 Rev. 2 make about this? Choose two.

  1. Multi-pass overwriting is only valid where the media has been degaussed first.
  2. The defence manual dropped its overwriting specifications in 2006.
  3. Seven passes are now the minimum and the procedure should be raised to thirty-nine.
  4. Repeated passes gain little on a solid-state drive that keeps overprovisioned capacity.
Show the answer

Answer: B. The defence manual dropped its overwriting specifications in 2006.
D. Repeated passes gain little on a solid-state drive that keeps overprovisioned capacity.

The overwriting specifications were removed from that manual in 2006, and on media such as solid-state drives with overprovisioning such practices achieve very little confidentiality protection.

Source: NIST SP 800-88 Rev. 2 (NIST) — SP 800-88 Rev. 2 > 3.1.1 footnote 5

Challenge yourself on this topic → Study as cards