CompTIA Security+ (SY0-601) — Question 627

Which of the following best describes a legal hold?

Answer options

• A. It occurs during litigation and requires retention of both electronic and physical documents.
• B. It occurs during a risk assessment and requires retention of risk-related documents.
• C. It occurs during incident recovery and requires retention of electronic documents.
• D. It occurs during a business impact analysis and requires retention of documents categorized as personally identifiable information.

Correct answer: A

Explanation

The correct answer, A, accurately describes a legal hold as a requirement during litigation to preserve both electronic and physical documents. Options B, C, and D refer to different processes that do not involve legal holds and focus on risk assessments, incident recovery, and business impact analysis, respectively.