CompTIA CASP+ (CAS-003) — Question 44

Legal counsel has notified the information security manager of a legal matter that will require the preservation of electronic records for 2000 sales force employees. Source records will be email, PC, network shares, and applications.
After all restrictions have been lifted, which of the following should the information manager review?

Answer options

• A. Data retention policy
• B. Legal hold
• C. Chain of custody
• D. Scope statement

Correct answer: A

Explanation

The data retention policy outlines how long data should be kept and the procedures for managing it, making it crucial to review after legal restrictions are lifted. The legal hold refers to the requirement to preserve information for legal purposes, which has already been addressed. Chain of custody concerns the tracking of evidence, while the scope statement defines the project's boundaries, neither of which are immediately relevant to the review of data management after restrictions are lifted.