nerdexam
CompTIA

SY0-701 · Question #221

An organization is required to maintain financial data records for three years and customer data for five years. Which of the following data management policies should the organization implement?

The correct answer is A. Retention. The organization should implement a retention policy to ensure that financial data records are kept for three years and customer data for five years. A retention policy specifies how long different types of data should be maintained and when they should be deleted. Retention…

Submitted by parkjh· Mar 6, 2026Security program management and oversight

Question

An organization is required to maintain financial data records for three years and customer data for five years. Which of the following data management policies should the organization implement?

Options

  • ARetention
  • BDestruction
  • CInventory
  • DCertification

How the community answered

(24 responses)
  • A
    75% (18)
  • B
    4% (1)
  • C
    4% (1)
  • D
    17% (4)

Explanation

The organization should implement a retention policy to ensure that financial data records are kept for three years and customer data for five years. A retention policy specifies how long different types of data should be maintained and when they should be deleted. Retention: Ensures that data is kept for a specific period to comply with legal, regulatory, or business requirements. Destruction: Involves securely deleting data that is no longer needed, which is part of the retention lifecycle but not the primary focus here. Inventory: Involves keeping track of data assets, not specifically about how long to retain data. Certification: Ensures that processes and systems meet certain standards, not directly related to data retention periods.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice