2.5 - Ensure Appropriate Asset Retention (e.g., End of Life (EOL), End of Support) CISSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of sanitizing a storage device before disposal?

   • ATo reduce the physical size of the device
   • BTo improve the device's performance for resale
   • CTo remove all data so it cannot be recovered
   • DTo comply with environmental regulations
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A global bank must comply with data retention regulations in multiple countries. One country requires retaining transaction records for 10 years, another for 5 years. The bank currently stores all records in a single data center and applies the 10-year period globally. This has led to high storage costs and legal exposure in the 5-year country, where data protection law requires deletion after 5 years. What is the most appropriate approach?

   • AApply the 10-year retention period globally to ensure compliance with the stricter regulation.
   • BImplement a retention schedule that applies the 10-year period to records from the 10-year country and the 5-year period to records from the 5-year country.
   • CStore all records in the 5-year country to take advantage of the shorter retention period.
   • DApply the 5-year retention period globally to reduce storage costs.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a method of secure disposal for a hard drive that contains highly sensitive data?

   • AReformatting the drive
   • BMoving the drive to a different computer
   • CDeleting files and emptying the recycle bin
   • DPhysical destruction of the drive
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A multinational corporation must comply with data protection regulations in multiple jurisdictions, each with different retention requirements for employee records. The company currently has a single global retention policy that applies the most restrictive period to all records. This has led to excessive storage costs and difficulty in e-discovery. What is the most appropriate approach?

   • ARetain all records indefinitely to avoid any risk of non-compliance with any jurisdiction.
   • BDelete all records after the shortest required period to simplify compliance.
   • CAdopt a single global policy that applies the least restrictive period to all records to minimize costs.
   • DDevelop a retention policy that maps each record type to the applicable regulatory requirements by jurisdiction, with a schedule that reflects those differences.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A law firm is creating a retention schedule for client case files. Some files contain sensitive personal data, others contain only billing information. The firm must comply with bar association rules that require retaining case files for a minimum of five years, but also wants to minimize data exposure. What is the most appropriate approach?

   • ARetain sensitive files for ten years and billing files for five years to be safe.
   • BDelete all case files after five years, including those involved in ongoing litigation.
   • CClassify case files by sensitivity and apply the five-year period to all, but implement stricter access controls for sensitive files.
   • DApply a uniform five-year retention period to all case files, regardless of content.
   Reveal Solution Discussion Select an answer first