Which of the following best describes the policy andor proce

Which of the following best describes the policy andor proce - CompTIA DataSys+ DS0-001

Question

Which of the following best describes the policy and/or procedure that ensures records are kept in a database for a period of time and not deleted?

Answers

Data classification policy
Standard operating procedure
correct

Data retention policy
Global regulation

Explanation

Correct Answer: c. Data retention policy

A data retention policy outlines how long data should be stored and when it should be deleted or archived. This policy ensures that data, such as logs or records in a database, is kept for a required period to comply with business needs or regulatory requirements.

It helps organizations manage storage resources efficiently, meet legal obligations, and support audits, investigations, or disaster recovery by maintaining accessible data over time.

Why the Other Options Are Incorrect:

A. Data classification policy: This policy categorizes data based on sensitivity or business value (e.g., public, confidential, restricted), but it does not define how long data is retained. It supports access control, not data lifespan.
B. Standard operating procedure: An SOP describes step-by-step instructions to carry out specific tasks consistently. While it may reference data handling, it does not define retention timelines or legal requirements for keeping records.
D. Global regulation: This refers to laws like GDPR or HIPAA that mandate data practices, but they are not internal company policies. Organizations must create their own data retention policies to comply with such regulations.