hardMultiple ChoiceObjective-mapped
200-201 Practice Question: Must retain security logs for at least one year…
An organization must retain security logs for at least one year due to regulatory compliance. However, their SIEM storage is limited. Which strategy best balances compliance and storage?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Archive logs to compressed files after 30 days and retain for one year.
Archiving logs to compressed files after 30 days preserves data for compliance while saving storage space. Option B deletes logs too early; Option C loses raw data; Option D is expensive.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Archive logs to compressed files after 30 days and retain for one year.
Why this is correct
Archiving preserves logs for compliance while reducing storage consumption.
- ✗
Delete logs after 30 days and rely on local log rotation.
Why it's wrong here
Deleting logs violates retention requirements.
- ✗
Only store alerts and drop raw logs.
Why it's wrong here
Raw logs are often required for thorough investigations.
- ✗
Increase SIEM storage without archiving.
Why it's wrong here
Increasing storage is costly and does not optimize space.
Go deeper
Related to this question
About these practice questions
This 200-201 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.