Which Data Policy Governs Archiving Customer Transactions for Compliance?

SY0-701 By islever Editorial Last updated

Short answer

B Retention

Question

An administrator assists the legal and compliance team with ensuring information about customer transactions is archived for the proper time period. Which of the following data policies is the administrator carrying out?
  1. Compromise
  2. Retention Correct Answer
  3. Analysis
  4. Transfer
  5. Inventory

Key Takeaways

It tests recognition of compliance-driven archival versus active data handling, where candidates often confuse long-term preservation with temporary storage or inventory tracking.

This question evaluates understanding of data lifecycle management, specifically how organizations legally preserve records for mandated durations. Community consensus unanimously confirms that maintaining transaction data aligns with retention policies driven by regulatory requirements.

Common mistake: Candidates frequently select 'Inventory' or 'Transfer' by misinterpreting 'archived' as cataloging assets or moving data, rather than recognizing the legal mandate for time-bound preservation.

Expert Analysis

Core Concept: Data Retention Policies

The scenario describes an administrator collaborating with legal and compliance teams to archive customer transaction data for a mandated duration. This directly maps to a data retention policy, which dictates how long specific information must be preserved to satisfy regulatory obligations, legal holds, and audit requirements. As noted in community discussions, frameworks like the Sarbanes-Oxley Act (SOX) and financial compliance standards strictly enforce these timelines, making retention critical for avoiding penalties and ensuring records remain accessible during investigations.

Why Other Options Are Incorrect

  • Compromise: Refers to a security breach or unauthorized access event, not a governance policy.
  • Analysis: Involves examining data for insights, threat hunting, or performance metrics, not mandated archival.
  • Transfer: Relates to migrating data between systems or locations, ignoring time-based compliance rules.
  • Inventory: Focuses on cataloging and tracking data repositories or IT assets, rather than enforcing preservation schedules.

Mastering the distinction between active data operations and compliance-driven lifecycle stages is essential for the SY0-701 governance objectives.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When encountering data lifecycle questions, immediately scan for compliance-related keywords like 'legal,' 'audit,' or 'duration' to prioritize retention over technical operations. Map the described action to the specific phase of the data lifecycle (creation, storage, usage, archival, destruction) to rapidly eliminate distractors and confirm the correct policy.

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 4 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 4

  1. dbrowndiver 👍 7 Answered B
    The administrator is tasked with ensuring that transaction data is archived for the appropriate duration. This task involves adhering to retention schedules that dictate how long such data must be kept to meet compliance obligations. Retention policies are critical for legal and compliance teams, as they help avoid legal issues related to data disposal and ensure that records are available for audits, investigations, or regulatory reviews.
  2. edf622f 👍 2
    Sarbanes-Oxley Act. The answer is B.
  3. Shaman73 👍 3
    B. Retention
  4. 1f2b013 👍 1 Answered B
    Retention

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide