When it comes to magnetic media sanitization, what difference can be made between clearing and purging
information?

A.
Clearing completely erases the media whereas purging only removes file headers, allowing the recovery of
files.

B.
Clearing renders information unrecoverable by a keyboard attack and purging renders information
unrecoverable against laboratory attack.

C.
They both involve rewriting the media.

D.
Clearing renders information unrecoverable against a laboratory attack and purging renders information
unrecoverable to a keyboard attack.

Explanation:
The removal of information from a storage medium is called sanitization. Different kinds of sanitization provide
different levels of protection. A distinction can be made between clearing information (rendering it
unrecoverable by a keyboard attack) and purging (rendering it unrecoverable against laboratory attack).
There are three general methods of purging media: overwriting, degaussing, and destruction.
There should be continuous assurance that sensitive information is protected and not allowed to be placed in a
circumstance wherein a possible compromise can occur. There are two primary levels of threat that the
protector of information must guard against: keyboard attack (information scavenging through system software
capabilities) and laboratory attack (information scavenging through laboratory means). Procedures should be
implemented to address these threats before the Automated Information System (AIS) is procured, and the
procedures should be continued throughout the life cycle of the AIS.
Incorrect Answers:
A: It is not true that clearing completely erases the media or that purging only removes file headers, allowing the
recovery of files.
C: Clearing does not involve rewriting the media.
D: It is not true that clearing renders information unrecoverable against a laboratory attack or purging renders
information unrecoverable to a keyboard attack.