Which words summarize categories of data disposal described in the NIST SP 800-88 Revision 1. Guidelines for Media Sanitation?

NIST Special Publication 800-88 Revision 1, "Guidelines for Media Sanitation," explicitly defines three categories of sanitization to counter data remanence. These categories are Clear, Purge, and Destroy. 'Clear' involves using logical techniques to sanitize data against simple recovery tools. 'Purge' uses physical or logical techniques to make data recovery infeasible even with advanced laboratory methods. 'Destroy' renders the media completely unusable and unable to store data again, making data recovery impossible. These three terms form the foundational framework for media sanitization decisions within the standard.

B. "Redact" is a term for obscuring or removing sections of a document, not a category for sanitizing entire storage media as defined by NIST.

C. "Overwrite" is a specific method used to perform the 'Clear' action; it is not one of the three primary categories of sanitization.

D. Similar to option C, "overwrite" is a technique or method, not a distinct top-level category alongside 'Clear' and 'Destroy' in the NIST framework.

1. National Institute of Standards and Technology (NIST). (December 2014). SP 800-88 Rev. 1

Guidelines for Media Sanitation. U.S. Department of Commerce.

Executive Summary

Page vii

Paragraph 2: "The types of sanitization are Clear

Purge

and Destroy."

Section 2.3

Page 8: This section is titled "Sanitization and Disposition Decisions" and provides detailed definitions for Clear

Purge

and Destroy.

2. Carnegie Mellon University

Information Security Office. (n.d.). Guidelines for Data Sanitization and Disposal.

Section: Sanitization Methods: This document directly references and defines the three methods from NIST SP 800-88 Rev. 1: "The following methods are based on the NIST 800-88 Guidelines for Media Sanitation: Clear

Purge

Destroy."