Exam SY0-701 topic 1 question 145 discussion

Actual exam question from CompTIA's SY0-701

Question #: 145
Topic #: 1

After a company was compromised, customers initiated a lawsuit. The company's attorneys have requested that the security team initiate a legal hold in response to the lawsuit. Which of the following describes the action the security team will most likely be required to take?

A. Retain the emails between the security team and affected customers for 30 days.
B. Retain any communications related to the security breach until further notice.
C. Retain any communications between security members during the breach response.
D. Retain all emails from the company to affected customers for an indefinite period of time.

Show Suggested Answer

Suggested Answer: B 🗳️

by Shaman73 at June 4, 2024, 7:58 a.m.

Comments

Submit Cancel

dbrowndiver

Highly Voted 11 months ago

Selected Answer: B

Retain any communications related to the security breach until further notice is the correct answer. This approach ensures that all relevant evidence is preserved in compliance with the legal hold, covering the full scope of communications and documents needed for the lawsuit. It aligns with the purpose of a legal hold, which is to safeguard all potential evidence until the legal proceedings are complete.

upvoted 5 times

...

Shaman73

Most Recent 1 year ago

• B. Retain any communications related to the security breach until further notice.

upvoted 3 times

...