CERTIFIED-IN-CYBERSECURITY · Question #623
Which of the following is a best practice for data retention?
The correct answer is D. Regularly purging data that is no longer needed. Best practice for data retention is to regularly purge data that is no longer needed. Retaining data indefinitely (A) increases storage costs, expands the attack surface, and creates unnecessary legal and compliance liability. Annual backups only (B) are insufficient for most…
Question
Which of the following is a best practice for data retention?
Options
- AKeeping all data forever
- BBacking up data only once a year
- CNone of the above
- DRegularly purging data that is no longer needed
How the community answered
(54 responses)- A6% (3)
- B4% (2)
- C2% (1)
- D89% (48)
Explanation
Best practice for data retention is to regularly purge data that is no longer needed. Retaining data indefinitely (A) increases storage costs, expands the attack surface, and creates unnecessary legal and compliance liability. Annual backups only (B) are insufficient for most business continuity needs. A sound data retention policy defines how long each data class must be kept based on legal, regulatory, and business requirements - and then mandates secure disposal when that period expires. Minimizing unnecessary data directly reduces breach exposure and aligns with regulations like GDPR.
Topics
Community Discussion
No community discussion yet for this question.