mediumMultiple Choice
CCSP Practice Question: A cloud customer receives a legal hold notice for…
A cloud customer receives a legal hold notice for pending litigation. The data resides in multi-tenant storage. What is the most appropriate initial action?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Preserve the relevant data using customer-accessible tools
Preserving all relevant data from the customer's tenant is required. Alerting other tenants violates privacy; relying solely on provider backup may be insufficient as backups might not be retained indefinitely; doing nothing is non-compliant.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Do nothing until the provider issues a notice
Why it's wrong here
The duty to preserve attaches when litigation is reasonably anticipated, and the customer, as data controller, owns that obligation regardless of provider notices. Waiting suits provider-managed infrastructure events, but here it risks spoliation before any hold is applied to the multi-tenant storage.
- ✗
Rely on the provider's backup retention cycle
Why it's wrong here
Backup retention cycles overwrite or expire data on a schedule the customer does not control, so evidence could be destroyed before preservation is confirmed. Retention policies suit routine recovery objectives, not litigation; the initial action must suspend deletion of the specific custodial data.
- ✗
Alert all other tenants about the hold
Why it's wrong here
Other tenants have no custodial relationship to the data and no authority over it; notifying them breaches confidentiality and could tip off unrelated parties. Tenant notification fits shared-incident transparency, whereas a legal hold requires preserving the customer's own data and notifying its custodians.
- ✓
Preserve the relevant data using customer-accessible tools
Why this is correct
A legal hold obliges the customer to prevent destruction of potentially relevant data. Using customer-accessible tools to preserve that data in multi-tenant storage satisfies this duty, since the provider cannot selectively freeze one tenant's objects without affecting shared infrastructure.
About these practice questions
One of 934 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.