CISSP Exam QuestionsBrowse all questions from this exam

CISSP Exam - Question 448


Concerning appropriate data retention policies, which of the following is the MAIN risk factor for the availability of archived information?

Show Answer
Correct Answer: C

The main risk factor for the availability of archived information is if it is recorded in obsolete media, which cannot be read. As technology advances, older storage formats may become obsolete, and the necessary hardware or software to read such data may no longer be available. This scenario poses a significant risk because it can lead to situations where archived data becomes completely inaccessible. Storing data in third-party environments, maintaining data offline, or the costs associated with data retention might also present challenges, but they do not directly impact the accessibility of the data to the extent that obsolescence does.

Discussion

10 comments
Sign in to comment
yottabyteOption: A
Feb 3, 2023

I am torn between A and C here. Main risk factor is storing in third party environments but the question ask main risk factor for the AVAILABILITY, so it could be either A or C here; Do companies store archive data in obsolete media more often or in cloud media. I would say cloud media and I vote for A. There are always tools out there that can read obsolete media.

awscOption: C
Mar 28, 2023

The main risk factor for the availability of archived information is option C, data recorded in obsolete media cannot be read. This is because as technology changes, old storage formats may become obsolete, and the hardware or software needed to read the data may no longer be available. This can make it difficult or impossible to access the archived information, which can be a serious issue if the information is needed for legal or business reasons. Options A, B, and D are also important considerations for appropriate data retention policies, but they are not the main risk factors for the availability of archived information. Storing data in third-party environments can introduce security and privacy risks, but this does not necessarily affect the availability of the archived information. Maintaining data offline may require a higher time to access, but it does not necessarily affect the ability to access the information if the storage format is still readable. Retention of data involves a cost, but this is a separate issue from the availability of the archived information.

awsc
Mar 31, 2023

sorry, ignore my first comment... A is the better answer here

jackdryan
May 16, 2023

A is correct

DeviantMotoOption: C
Jul 31, 2023

Where does the question say what kind of media it's stored on or that it's on a 3rd party vendors site? You could have archived it yesterday.

DapengZhangOption: C
Dec 6, 2023

Option C is the main risk for availability. For A we need consider confidentiality.

YesPleaseOption: B
Dec 24, 2023

Answer B) Data maintained offline requires a higher time to access. I believe that this question should be answered with more generalization when it comes to Availability. - Cost has nothing to do with Availability..so D can be eliminated. - Data recorded in obsolete media cannot be read....(not sure about you, but I can easily find old equipment on eBay)...so this may/may not be a problem. But answer B is a general statement and answer A may be able to fold into it as it may take time to make requests to 3rd party company to access archive data (even if it is a new system like AWS/Azure archives).

sausagemanOption: A
Mar 10, 2023

I'd go with A here

InclusiveSTEAMOption: C
Oct 22, 2023

C) Data recorded in obsolete media cannot be read is the main risk factor for the availability of archived information in regards to data retention policies. If archives are stored on legacy media formats that become obsolete, there is a major risk the data will no longer be readable or accessible when needed for compliance or legal purposes. For example, if data is archived to floppy disks or tape formats that modern systems can no longer interface with, the information is effectively lost. The other factors are manageable risks: A) Third-party archiving can be done securely with diligence. B) Offline data retrieval delays can be planned for. D) Data retention costs can be budgeted.

SoleandheelOption: C
Dec 18, 2023

C. Data recorded in obsolete media cannot be read. This risk factor highlights the issue of data stored on outdated or obsolete storage media, such as obsolete physical formats (e.g., floppy disks, magnetic tapes) or digital formats that have become incompatible with modern systems. Over time, as technology evolves, older storage media and file formats may become unreadable or incompatible with current hardware and software. When data is stored on such media, there is a significant risk that it may become inaccessible in the future due to the unavailability of compatible readers or equipment.

GuardianAngelOption: C
Feb 9, 2024

Answer: C. Data recorded in obsolete media cannot be read. Archived data is INACTIVE DATA that is stored LONG-TERM OR INDEFINITELY for legal or compliance reasons; for example student transcripts or hospital records. Cloud storage doesn't present any higher risk for archived data than it does for backup data. Offline data does have a higher time to access, but this is ARHIEVED (inactive data) so it’s not like backup data that would be used in a recovery and so time to access is really irrelevant for archived data. There's a cost associated whether it's cloud or offsite storage and that is a given 'cost of doing business' not necessarily a risk. If you have data on 40 year old media; a 40 yr old corporate level system is not something typically available on eBay. If you didn't copy the archived data to a newer media that would run on a current system, your data is gone.

CCNPWILLOption: C
Jun 2, 2024

not being able to be read affects availability. Answer is C.