nerdexam
(ISC)2

CISSP · Question #613

What is the MAIN reason to ensure the appropriate retention periods are enforced for data stored on electronic media?

The correct answer is D. To reduce the risk of loss, unauthorized access, use, modification, and disclosure. Data stored on electronic media, such as hard disks, flash drives, or optical disks, are subject to various security risks, such as loss, unauthorized access, use, modification, or disclosure. These risks can compromise the confidentiality, integrity, or availability of the…

Submitted by diego_uy· Mar 5, 2026Asset Security

Question

What is the MAIN reason to ensure the appropriate retention periods are enforced for data stored on electronic media?

Options

  • ATo reduce the carbon footprint by eliminating paper
  • BTo create an inventory of data assets stored on disk for backup and recovery
  • CTo declassify information that has been improperly classified
  • DTo reduce the risk of loss, unauthorized access, use, modification, and disclosure

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    8% (3)
  • D
    87% (34)

Explanation

Data stored on electronic media, such as hard disks, flash drives, or optical disks, are subject to various security risks, such as loss, unauthorized access, use, modification, or disclosure. These risks can compromise the confidentiality, integrity, or availability of the data, as well as the reputation, compliance, or liability of the organization or the data owner. Therefore, the main reason to ensure the appropriate retention periods are enforced for data stored on electronic media is to reduce these risks. Retention periods are the duration of time that the data must be kept or preserved on the electronic media, based on the value, sensitivity, or legal requirements of the data. Enforcing the appropriate retention periods can help to minimize the exposure or vulnerability of the data to the security risks, as well as to optimize the storage capacity and performance of the electronic media. Reducing the carbon footprint by eliminating paper, creating an inventory of data assets stored on disk for backup and recovery, or declassifying information that has been improperly classified are not the main reasons to ensure the appropriate retention periods are enforced for data stored on electronic media, as they are more related to environmental, operational, or compliance objectives.

Topics

#data retention#data protection#risk reduction#privacy

Community Discussion

No community discussion yet for this question.

Full CISSP Practice