nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #623

Which of the following is a best practice for data retention?

The correct answer is D. Regularly purging data that is no longer needed. Best practice for data retention is to regularly purge data that is no longer needed. Retaining data indefinitely (A) increases storage costs, expands the attack surface, and creates unnecessary legal and compliance liability. Annual backups only (B) are insufficient for most…

Security Principles

Question

Which of the following is a best practice for data retention?

Options

  • AKeeping all data forever
  • BBacking up data only once a year
  • CNone of the above
  • DRegularly purging data that is no longer needed

How the community answered

(54 responses)
  • A
    6% (3)
  • B
    4% (2)
  • C
    2% (1)
  • D
    89% (48)

Explanation

Best practice for data retention is to regularly purge data that is no longer needed. Retaining data indefinitely (A) increases storage costs, expands the attack surface, and creates unnecessary legal and compliance liability. Annual backups only (B) are insufficient for most business continuity needs. A sound data retention policy defines how long each data class must be kept based on legal, regulatory, and business requirements - and then mandates secure disposal when that period expires. Minimizing unnecessary data directly reduces breach exposure and aligns with regulations like GDPR.

Topics

#Data Retention#Data Minimization#Information Governance#Compliance

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice