CompTIA CASP+ (CAS-004) — Question 418

A company wants to reduce its backup storage requirement and is undertaking a data cleanup project. Which of the following should a security administrator consider first when determining which data should be deleted?

Answer options

• A. Retention schedules
• B. Classification levels
• C. Sanitization requirements
• D. Data labels
• E. File size

Correct answer: A

Explanation

The correct answer is A, as retention schedules dictate how long data must be kept based on regulatory and organizational policies. Options B, C, D, and E may provide context for data handling but do not directly address the necessity of maintaining data for compliance and operational purposes, which is governed by retention schedules.