A systems administrator has been notified of possible illegal activities taking place on the network and has been directed to ensure any relevant emails are preserved for court use. Which of the follo

Email archiving is a routine retention process for compliance or retrieval purposes and is not specifically triggered by legal proceedings or focused on court admissibility.

Version control tracks incremental changes to files or code over time and has no relation to preserving email evidence for legal use.

A legal hold (also called a litigation hold) requires an organization to suspend normal deletion or modification of any data that may be relevant to a legal investigation or court case. Emails related to possible illegal activities must be preserved in their original, unaltered state to remain admissible as evidence. Failure to implement a legal hold can result in sanctions for spoliation of evidence.

File integrity monitoring is a real-time security control that detects unauthorized file changes and is unrelated to the legal preservation of email evidence.