Study. uk . com
  1. Home
  2. All questions
  3. Question 76

CompTIA Security+ study material · question 76 of 611

Why is an over-long records retention period a security problem as well as a storage cost?

  1. Because retention periods must match backup schedules
  2. Because keeping data past its purpose enlarges what a breach discloses
  3. Because old records cannot be encrypted
  4. Because auditors reject any retention beyond one year
Show the answer

Answer: B. Because keeping data past its purpose enlarges what a breach discloses

Retention cuts both ways: too long enlarges the breach, too short can violate a legal hold or schedule.

Source: NIST SP 800-63B Rev. 4 (NIST) — SP 800-63B-4 § 4 Records Retention Policy

Challenge yourself on this topic → Study as cards