Question

A cloud-hosted financial services firm has an automated retention policy that permanently deletes customer transaction records after seven years. The legal department notifies the security team that litigation is imminent involving a set of accounts whose records are approaching the seven-year deletion threshold. What is the MOST appropriate action for the security team to take regarding those records?

Accepted Answer

Apply a legal hold to the affected records, suspending automated deletion until the hold is formally released

Answer

Allow the retention policy to delete the records on schedule, since the policy predates the litigation notice

Answer

Immediately export the records to an encrypted archive and then let the automated deletion proceed

Answer

Extend the global retention period for all customer records to ten years to ensure nothing is lost