CISSP Practice Question (Domain 2: Asset Security / Data Lifecycle & Legal Risk)

A company migrates legacy collaboration data to a modern platform. To reduce cost, leadership approves automated deduplication and compression before long term storage. Months later, legal requests a specific historical record for litigation, but IT cannot reconstruct the original context due to transformation.

What is the MOST appropriate control that should have been established FIRST?

A. Immutable backups of transformed data

B. Legal hold integration into the data lifecycle process

C. Stronger access controls over archived records

D. Increased retention periods for critical data sets

Come back for the answer tomorrow, or study more now!

15 comments