nerdexam
GIAC

GSEC · Question #220

Which of the following processes is known as sanitization?

The correct answer is D. Removing the content from the media so that it is difficult to restore. Sanitization is the process of removing or rendering unrecoverable the data on storage media so that confidential information cannot be retrieved after disposal.

Incident Handling, Risk, and Governance

Question

Which of the following processes is known as sanitization?

Options

  • AAssessing the risk involved in discarding particular information.
  • BVerifying the identity of a person, network host, or system process.
  • CPhysically destroying the media and the information stored on it.
  • DRemoving the content from the media so that it is difficult to restore.

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    3% (1)
  • D
    83% (24)

Why each option

Sanitization is the process of removing or rendering unrecoverable the data on storage media so that confidential information cannot be retrieved after disposal.

AAssessing the risk involved in discarding particular information.

Assessing the risk involved in discarding information describes a risk management or information classification activity, not the sanitization process itself.

BVerifying the identity of a person, network host, or system process.

Verifying the identity of a person, network host, or system process is the definition of authentication, a completely separate security concept from data sanitization.

CPhysically destroying the media and the information stored on it.

Physically destroying the media is specifically termed 'destruction' and is one disposal method - sanitization more broadly refers to data removal techniques that may not require physically destroying the media.

DRemoving the content from the media so that it is difficult to restore.Correct

Sanitization specifically refers to the deliberate process of removing or making unrecoverable the data stored on media, using methods such as overwriting, degaussing, or cryptographic erasure. NIST SP 800-88 defines media sanitization as actions taken to render access to target data infeasible for a given level of effort, which directly corresponds to making content difficult or impossible to restore.

Concept tested: Data sanitization definition and media disposal

Source: https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final

Topics

#data sanitization#media disposal#data destruction#information security

Community Discussion

No community discussion yet for this question.

Full GSEC Practice