CompTIA Updated SY0-701 Exam Questions and Answers by baxter

A data retention policy is a set of rules that defines how long data should be stored and when it should be deleted or archived. An administrator assists the legal and compliance team with ensuring information about customer transactions is archived for the proper time period by following the data retention policy of the organization. This policy helps the organization to comply with legal and regulatory requirements, optimize storage space, and protect data privacy and security.

References

CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter 3, Section 3.4, page 1211

CompTIA Security+ Practice Tests: Exam SY0-701, 3rd Edition, Chapter 3, Question 15, page 832

The correct answer is A. Implement regular account reviews.

This scenario describes privilege creep, which occurs when users accumulate permissions over time as they change roles, departments, or responsibilities. Regular account reviews help ensure users have only the access required for their current job duties.

This supports the principle of least privilege, which is a key CompTIA Security+ SY0-701 identity and access management concept.

Why the other options are incorrect:

B. Provide privileged user account training

Training is useful, but it does not remove unnecessary privileges.

C. Require a jump box for privileged account use

A jump box can control administrative access to sensitive systems, but it does not solve the issue of users retaining excessive privileges.

D. Apply more restrictive security baselines

Security baselines harden systems and configurations, but they do not directly review or remove unnecessary user permissions.

Therefore, the best answer is regular account reviews.