Study. uk . com
  1. Home
  2. All questions
  3. Question 164

CISSP study material · question 164 of 500

A vendor offers shredding as the disposal route for drives that held highly sensitive records. What limitation does NIST SP 800-88 Rev. 2 place on shredding and pulverising?

  1. They may only be applied by a third party under contract.
  2. They apply to optical media only, never to magnetic or solid-state media.
  3. They are acceptable only where the media has been cryptographically erased first.
  4. They should be avoided for anything but the lowest security categories, because rising data density and material hardness blunt them.
Show the answer

Answer: D. They should be avoided for anything but the lowest security categories, because rising data density and material hardness blunt them.

As data density and the hardness of component materials increase, these techniques lose effectiveness, so SP 800-88 restricts pulverising and shredding to the lowest security categories.

Source: NIST SP 800-88 Rev. 2 (NIST) — SP 800-88 Rev. 2 > 3.1.3 Destroy Sanitization Method

Challenge yourself on this topic → Study as cards