GSEC · Question #220
Which of the following processes is known as sanitization?
The correct answer is D. Removing the content from the media so that it is difficult to restore. Sanitization is the process of removing or rendering unrecoverable the data on storage media so that confidential information cannot be retrieved after disposal.
Question
Which of the following processes is known as sanitization?
Options
- AAssessing the risk involved in discarding particular information.
- BVerifying the identity of a person, network host, or system process.
- CPhysically destroying the media and the information stored on it.
- DRemoving the content from the media so that it is difficult to restore.
How the community answered
(29 responses)- A10% (3)
- B3% (1)
- C3% (1)
- D83% (24)
Why each option
Sanitization is the process of removing or rendering unrecoverable the data on storage media so that confidential information cannot be retrieved after disposal.
Assessing the risk involved in discarding information describes a risk management or information classification activity, not the sanitization process itself.
Verifying the identity of a person, network host, or system process is the definition of authentication, a completely separate security concept from data sanitization.
Physically destroying the media is specifically termed 'destruction' and is one disposal method - sanitization more broadly refers to data removal techniques that may not require physically destroying the media.
Sanitization specifically refers to the deliberate process of removing or making unrecoverable the data stored on media, using methods such as overwriting, degaussing, or cryptographic erasure. NIST SP 800-88 defines media sanitization as actions taken to render access to target data infeasible for a given level of effort, which directly corresponds to making content difficult or impossible to restore.
Concept tested: Data sanitization definition and media disposal
Source: https://csrc.nist.gov/publications/detail/sp/800-88/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.