Question
Following a ransomware attack, the legal department at a company instructs the IT administrator to store the data from the affected virtual machines for a minimum of one year.
Which of the following is this an example of?
- A. Recoverability
- B. Retention Correct
- C. Encryption
- D. Integrity
Explanation
Keeping data for a defined minimum period because of a legal or regulatory instruction is a data retention requirement, often called a legal hold. Recoverability is about being able to restore data after a loss, encryption protects confidentiality, and integrity ensures data has not been altered; none of these defines how long data must be kept.
