What is the name of the rule that retains the original message during incident data retention?

What is the name of the rule that retains the original message during incident data retention?

• A. Limit Incident Data Retention with Retain Original Message option selected.
• B. Retain Original Data in All Incidents
• C. Limit File Retention to 30 days
• D. Keep a Copy of all Incident Messages

Answer: (A)

The key idea here is preserving the exact original content of an incident when you limit how long incident data is kept. The rule that does this is named “Limit Incident Data Retention with Retain Original Message option selected.” This rule explicitly combines setting a limit on how long incident data is stored with the option to keep the unaltered original message, ensuring the original content remains available for investigations, audits, or regulatory needs. Keeping the original message is crucial for evidentiary integrity and for accurate forensic review, rather than only retaining sanitized or summarized data. The other options don’t capture this specific behavior: they refer to different retention scopes or general retention timing and don’t guarantee that the exact original message is preserved within the limited retention window.

The key idea here is preserving the exact original content of an incident when you limit how long incident data is kept. The rule that does this is named “Limit Incident Data Retention with Retain Original Message option selected.” This rule explicitly combines setting a limit on how long incident data is stored with the option to keep the unaltered original message, ensuring the original content remains available for investigations, audits, or regulatory needs. Keeping the original message is crucial for evidentiary integrity and for accurate forensic review, rather than only retaining sanitized or summarized data.

The other options don’t capture this specific behavior: they refer to different retention scopes or general retention timing and don’t guarantee that the exact original message is preserved within the limited retention window.