Question 96

Explanation

The correct answer: A policy that retains data for a set period of time based on legal requirements and business needs is the most effective option because it strikes a balance between retaining data for as long as necessary to meet legal and business needs, while also ensuring that unnecessary data is not retained for extended periods of time. Over-retention can lead to unnecessary costs and increased risk in case of a data breach, while under-retention could result in non-compliance with laws or loss of valuable information. The incorrect answers: While a policy that retains data for the shortest amount of time possible may seem like a good idea to reduce the risk of data breaches, it may not comply with legal or industry regulations that require certain data to be kept for a specific period of time. Furthermore, it could result in the loss of data that might have future business value. A policy that retains data indefinitely is problematic because it can lead to storage management issues and increased costs. It also presents a higher risk if a data breach occurs, because the more data you have, the more data could be exposed. In addition, retaining data indefinitely might go against data privacy laws that dictate data should be deleted once it's no longer needed. A policy that randomly deletes data on a regular basis is not effective because it does not take into account the specific legal and business needs for data retention, and could result in the accidental deletion of important data. This policy lacks the structure and purpose of an effective data retention policy.