CompTIA Security+ (SY0-701) — Question 513

The internal audit team determines a software application is no longer in scope for external reporting requirements. Which of the following will confirm that the application is no longer applicable?

Answer options

• A. Data inventory and retention
• B. Right to be forgotten
• C. Due care and due diligence
• D. Acknowledgement and attestation

Correct answer: D

Explanation

The correct answer, D, Acknowledgement and attestation, serves as formal confirmation from stakeholders that the application is no longer relevant. Options A, B, and C pertain to data management practices and legal rights but do not provide the necessary confirmation regarding the application's status for external reporting.