CompTIA Security+ (SY0-601) — Question 405

Law enforcement officials sent a company a notification that states electronically stored information and paper documents cannot be destroyed. Which of the following explains this process?

Answer options

• A. Data breach notification
• B. Accountability
• C. Legal hold
• D. Chain of custody

Correct answer: C

Explanation

The correct answer is C, Legal hold, which refers to the obligation to preserve relevant information for potential legal proceedings. Options A and B are not applicable as they pertain to different processes, such as notifying about data breaches and ensuring responsibility, respectively. Option D, Chain of custody, relates to the handling of evidence, but does not specifically address the preservation of documents.