CompTIA Security+ (SY0-701) — Question 356

Which of the following is the most relevant reason a DPO would develop a data inventory?

Answer options

• A. To manage data storage requirements better
• B. To determine the impact in the event of a breach
• C. To extend the length of time data can be retained
• D. To automate the reduction of duplicated data

Correct answer: B

Explanation

The correct answer is B because a data inventory helps a DPO understand what data is held and its risks, which is crucial for breach impact assessment. Options A, C, and D, while related to data management, do not directly address the primary concern of understanding breach implications.