CompTIA Security+ (SY0-501) — Question 527

A contracting company recently completed its period of performance on a government contract and would like to destroy all information associated with contract performance. Which of the following is the best NEXT step for the company to take?

Answer options

• A. Consult data disposition policies in the contract.
• B. Use a pulper or pulverizer for data destruction.
• C. Retain the data for a period no more than one year.
• D. Burn hard copies containing PII or PHI

Correct answer: A

Explanation

The correct answer is A because consulting data disposition policies in the contract ensures compliance with legal and contractual obligations regarding data handling. Options B, C, and D may not align with specific regulations or the terms set forth in the contract, making them less appropriate next steps.