Data Storage, Retention, and Archiving CDPSE Practice Questions (Page 7)

Questions 31–34

1. 31application · medium

   A software company is developing a retention schedule. Employee personnel files must be kept for 6 years after termination per labor law. Product source code must be kept for the life of the product plus 2 years per licensing agreements. Customer support tickets must be kept for 3 years per the company's data privacy policy. What is the most appropriate way to structure the retention schedule?

   • ACreate separate retention categories for personnel files, source code, and support tickets, each with its own retention period and trigger event.
   • BRetain all records indefinitely to avoid any risk of non-compliance.
   • CUse the longest retention period (6 years) for all categories and review annually.
   • DGroup all records under a single 6-year retention period to simplify management.
   Reveal Solution Discussion Select an answer first
2. 32expert · medium

   A video surveillance company stores security footage for 30 days on high-performance SSDs for quick review. Footage older than 30 days must be kept for 1 year for insurance claims but is rarely accessed. The company wants to reduce storage costs without losing the ability to retrieve footage for claims. What is the most appropriate storage strategy?

   • ACompress the footage and keep it on the SSDs for 1 year.
   • BDelete footage older than 30 days to save storage costs.
   • CKeep all footage on SSDs for 1 year to ensure instant retrieval for any claim.
   • DMove footage older than 30 days to a lower-cost object storage tier with a retrieval time of a few hours.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company's retention policy states that customer email records must be deleted after 5 years. The privacy team wants to verify that the deletion is actually happening. What is the most effective way to monitor compliance with this policy?

   • ADisable deletion for 6 months to ensure no data is accidentally removed before the audit.
   • BRely on the email system administrator's monthly report that deletion is occurring.
   • CConduct an annual manual review of a sample of email records to check their age.
   • DImplement automated logging and periodic audits that verify records older than 5 years are no longer present in the email system.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the goal of secure data disposal?

   • ATo create a backup of the data before deletion
   • BTo encrypt data and store the key securely
   • CTo permanently destroy data so it cannot be recovered
   • DTo move data to a cheaper storage tier
   Reveal Solution Discussion Select an answer first