Data Storage, Retention, and Archiving CDPSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company's retention schedule requires that employee records be destroyed 5 years after termination. During an audit, the privacy team finds that some records from 6 years ago still exist. What is the most appropriate immediate action?

   • AInvestigate why the records were not deleted, check for legal holds, and then securely delete them if no hold applies.
   • BUpdate the retention schedule to 6 years to match the data that exists.
   • CImmediately delete all employee records that are older than 5 years.
   • DMove the records to an archive tier and keep them for another 5 years.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an example of a regulation that may mandate data retention periods?

   • AISO 27001
   • BGDPR
   • CCOBIT
   • DITIL
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A law firm archives closed case files to an offline tape library to reduce storage costs. A partner requests a case file from 5 years ago and needs it within 4 hours. The IT team estimates that retrieving and loading the tape will take 6 hours. What is the most appropriate action to meet the partner's requirement?

   • AInform the partner that the request will take 6 hours and ask if they can wait.
   • BMove the archived case files to a faster, online archival storage tier that can be retrieved within the required timeframe.
   • CRestore the entire tape library to primary storage to speed up future retrieval requests.
   • DKeep the files on tape but purchase a second tape drive to reduce retrieval time.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A government agency must destroy classified documents stored on both magnetic hard drives and solid-state drives (SSDs) when their retention period expires. The agency's security policy requires the highest assurance of data destruction. The drives are in a decommissioned server. What is the most appropriate destruction method?

   • AOverwrite all drives with multiple passes of random data.
   • BPhysically shred all drives, including the SSDs, and dispose of the pieces in regular trash.
   • CFormat all drives and reuse them for non-classified purposes.
   • DDegauss the magnetic hard drives and use Secure Erase on the SSDs, then verify each drive.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a key element typically included in a data retention policy?

   • AThe number of IT staff required
   • BThe brand of storage hardware to use
   • CThe color scheme of the data center
   • DRetention periods for different data categories
   Reveal Solution Discussion Select an answer first