When designing ECS solutions for data compliance and retention, which features should be prioritized to meet legal and business requirements?

Question

Options

• AAutomated data lifecycle management
• BUnlimited data retention without review
• CEncryption of data at rest and in transit
• DRegular audits and compliance reporting

• A
  81% (21)
• B
  19% (5)

Explanation

Designing compliant ECS solutions requires a layered approach: automated lifecycle management (A) ensures data is retained for legally required periods and purged when no longer needed, reducing exposure and storage costs. Encryption at rest and in transit (C) protects sensitive data from unauthorized access, satisfying regulations like GDPR, HIPAA, and SOX. Regular audits and compliance reporting (D) demonstrate ongoing adherence to those regulations and provide the paper trail regulators and auditors demand.

Option B is wrong because retaining data indefinitely without review is the opposite of good compliance practice - regulations often require deletion after retention periods expire, and unlimited retention increases legal liability and breach risk.

Memory tip: Think of compliant storage as a three-legged stool - Lifecycle (know when to keep/delete), Encryption (protect while stored), Audits (prove you're doing it right). Remove any leg and compliance collapses. "B" breaks the stool by ignoring the lifecycle leg entirely.

No community discussion yet for this question.