CERTIFIED-IN-CYBERSECURITY · Question #487
What best describes the PRIMARY objective of a data retention policy?
The correct answer is B. To specify how long information and assets should be retained. A data retention policy defines how long an organization must keep specific types of data before it can be securely deleted or archived. This is driven by legal, regulatory, and business requirements. Option A (indefinite preservation) contradicts the purpose, as keeping data…
Question
What best describes the PRIMARY objective of a data retention policy?
Options
- ATo preserve data indefinitely
- BTo specify how long information and assets should be retained
- CTo ensure that data is retained for at least five years
- DTo delineate areas outside the scope of time-based data management
How the community answered
(41 responses)- A5% (2)
- B93% (38)
- D2% (1)
Explanation
A data retention policy defines how long an organization must keep specific types of data before it can be securely deleted or archived. This is driven by legal, regulatory, and business requirements. Option A (indefinite preservation) contradicts the purpose, as keeping data indefinitely creates risk and cost. Option C (five years) is too specific and not universally applicable. Option D describes exclusions, not the primary goal. The primary objective is always to specify defined retention periods for different data categories.
Topics
Community Discussion
No community discussion yet for this question.