Which factor is most important when determining the retention period for a specific type of data?

The number of users who access the data

The data owner's personal preference

Legal and regulatory requirements

The storage medium's maximum capacity

A data custodian is responsible for maintaining the availability of a critical database. The database is used by multiple applications and must be accessible 24/7. Which control is most important to implement?

Redundant hardware and failover mechanisms

A company is subject to a legal hold order that requires preserving all emails related to an ongoing lawsuit. The company's email retention policy states that emails are deleted after 90 days. What should the company do to comply with the legal hold?

Delete emails after 90 days but keep a log of deleted emails

Suspend the deletion of emails covered by the legal hold until the hold is lifted

Continue the 90-day deletion policy and rely on backups

Anonymize the emails and retain them for the duration of the lawsuit

A security team is decommissioning a laptop that was used to access confidential client data. The laptop's solid-state drive (SSD) will be repurposed for a non-sensitive role. Which method is most appropriate to prevent data remanence?

Perform a standard format and reinstall the OS

Overwrite the SSD with random data multiple times

Use the SSD's built-in secure erase command

Certified Information Systems Security Professional

Domain 2Objective 4

2.4 - Manage Data Lifecycle CISSP Practice Questions (Page 4)

Part of the Asset Security domain, which accounts for 10% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

10%of the exam

Questions 16–20

16foundation · easy
Which factor is most important when determining the retention period for a specific type of data?
Select an answer first
17application · medium
A data custodian is responsible for maintaining the availability of a critical database. The database is used by multiple applications and must be accessible 24/7. Which control is most important to implement?
Select an answer first
18foundation · easy
Which principle requires that an organization collect only the personal data that is directly relevant and necessary to accomplish a specified purpose?
Select an answer first
19expert · hard
A company is subject to a legal hold order that requires preserving all emails related to an ongoing lawsuit. The company's email retention policy states that emails are deleted after 90 days. What should the company do to comply with the legal hold?
Select an answer first
20application · medium
A security team is decommissioning a laptop that was used to access confidential client data. The laptop's solid-state drive (SSD) will be repurposed for a non-sensitive role. Which method is most appropriate to prevent data remanence?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.