A security team at a large, global company needs to reduce the cost of storing data used for performing investigations. Which of the following types of data should have its retention length reduced?
Choose an answer
Tap an option to check your answer.
Correct answer: Packet capture.
Why this is the answer
Packet capture data is typically very large in volume, as it records all network traffic. Reducing its retention length significantly lowers storage costs compared to other data types. Endpoint logs and OS security logs, while important for investigations, generally consume less storage space than full packet captures. Vulnerability scan data, while valuable, is usually stored in reports or databases and doesn't generate the same continuous, high-volume data stream as network traffic, making its storage cost impact less significant in this context.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed