CompTIA CASP+ Practice Test

Which policy is MOST likely to be violated given a legal hold on all documents regarding an investigation?

1. Network Security Policy

2. Data Storage Policy

3. Data Retention Policy

4. Access Control Policy

The correct answer is: Data Retention Policy

The correct choice highlights the significance of a Data Retention Policy in relation to maintaining records for legal purposes. When a legal hold is placed on documents pertaining to an investigation, it requires that those documents are preserved and not deleted or altered during the specified period. This action directly contradicts the principles of the Data Retention Policy, which typically outlines how long data should be kept and the conditions under which it can be destroyed. This policy is designed to ensure compliance with legal, regulatory, and operational requirements for data management. A legal hold often suspends normal data retention processes, making it clear that the existing guidelines for data deletion or retention are being overridden due to legal obligations, hence representing a potential violation of the Data Retention Policy. Other policies such as Network Security Policy, Data Storage Policy, and Access Control Policy may play roles in the overarching framework of data governance, but they do not specifically address the requirements for preserving documents under a legal hold. The focus on how long data is retained and the stipulations around that retention makes the Data Retention Policy the most relevant in this context.