CISSP Asset Security Practice Question
Which phase of the data lifecycle involves the removal of data from active storage and placement into long-term storage for potential future use?
⚠ Common exam trap
CISSP often tests the distinction between Archive (long-term retention for future use) and Destroy (permanent elimination), causing candidates to confuse preservation with disposal when the question emphasizes 'removal from active storage.'
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Archive
The Archive phase of the data lifecycle is specifically defined as the stage where data is moved out of active, frequently accessed storage and placed into long-term retention for potential future reference or compliance needs. Unlike Destroy, which permanently eliminates data, Archive preserves the data in a lower-cost, less accessible tier. This aligns with lifecycle models (e.g., ISACA/ISO 27001 data lifecycle) where Archive follows Use and precedes eventual Destroy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use
Why it's wrong here
The 'Use' phase of the data lifecycle involves active processing, accessing, and manipulating data to fulfill its intended purpose. During this stage, data is actively employed by users or applications, which is distinct from any form of removal or long-term storage. This phase focuses on data utility and interaction, not its transition out of operational systems or eventual disposal.
- ✓
Archive
Why this is correct
Archiving is the process of systematically moving data from active, primary storage to a more cost-effective, long-term storage solution, typically for compliance, historical record-keeping, or future reference. While the data is 'removed' from immediate operational systems, it is retained and preserved, often under specific retention policies. This phase ensures data availability for regulatory or business needs without consuming expensive active storage resources.
- ✗
Destroy
Why it's wrong here
The 'Destroy' phase represents the final, irreversible removal of data from all storage media, ensuring it cannot be recovered or reconstructed. This critical process involves sanitization techniques like degaussing, overwriting, or physical destruction to meet security and privacy requirements. Unlike archiving, destruction signifies the complete and permanent elimination of data, making it unavailable for any future use or retrieval.
- ✗
Store
Why it's wrong here
The 'Store' phase refers to the persistent placement and maintenance of data within active, readily accessible storage systems, such as databases, file servers, or cloud storage. This phase ensures data is available for immediate operational use and processing, supporting ongoing business functions. It is fundamentally about keeping data accessible for active engagement, not about its removal from primary systems or transition to long-term retention.
Go deeper
Related to this question
Learn chapter
Legal, Regulatory, and Compliance Issues
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
ISO 27001
ISO 27001 is an international standard that specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS).
About these practice questions
Courseiva writes every CISSP question from scratch — 816 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.