Which statement best summarises how retention should be planned?
Select an answer to reveal the explanation.
Short Explanation
You plan retention by tying it to the investigation window teams need, the periods regulation requires, and the storage you have. Then you provision against all three and review the policy as the estate grows. That keeps retention practical, compliant, and reviewable.
Full Explanation
The statement that derives retention from the investigation window teams need, the periods regulation requires, and the storage available is correct because operational need and regulation set requirements, storage sets the constraint to provision against, and the resulting policy needs periodic review because ingest volume grows as the monitored estate does. The statement that chooses the longest period the storage can currently accommodate and revisits it only if storage runs out is incorrect because filling available storage is not a requirement-driven decision and leaves no headroom for growth. The statement that lets each team set its own retention independently, since needs differ, is incorrect because uncoordinated per-team settings make compliance unverifiable and capacity unpredictable. The statement that treats retention as a fixed product default that does not require a decision is incorrect because defaults are a starting point that will not reflect a particular organisation's obligations or scale. For the exam, be ready to name operational, regulatory and storage drivers together as the basis of a retention policy.