nerdexam
(ISC)2

CCSP · Question #284

In a data retention policy, what is perhaps the most crucial element? Response:

The correct answer is D. Data recovery procedures. While all elements are important, the most crucial aspect of a data retention policy is the data recovery procedures, as they ensure that retained data can actually be retrieved and restored when needed.

Submitted by tom_us· Apr 18, 2026Cloud Data Security

Question

In a data retention policy, what is perhaps the most crucial element? Response:

Options

  • ALocation of the data archive
  • BFrequency of backups
  • CSecurity controls in long-term storage
  • DData recovery procedures

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    3% (1)
  • D
    88% (30)

Why each option

While all elements are important, the most crucial aspect of a data retention policy is the data recovery procedures, as they ensure that retained data can actually be retrieved and restored when needed.

ALocation of the data archive

The location of the data archive is important for accessibility and security, but less crucial than the actual ability to recover data from it.

BFrequency of backups

The frequency of backups relates to data availability and currency but does not define the overarching ability to restore retained data.

CSecurity controls in long-term storage

Security controls in long-term storage are vital for protecting retained data, but if recovery procedures are non-existent or flawed, securing unusable data provides no value.

DData recovery proceduresCorrect

A data retention policy defines how long data must be kept and how it should be managed. The most crucial element within this policy is often the data recovery procedures, because without effective methods to retrieve, validate, and restore the retained data, its retention loses practical value. The ability to recover data ensures compliance, business continuity, and usability of archived information.

Concept tested: Essential data retention policy components

Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/data-retention-policies?view=o365-worldwide

Topics

#Data Retention Policy#Data Recovery#Information Lifecycle Management#Business Continuity

Community Discussion

No community discussion yet for this question.

Full CCSP Practice