Which action is a poor practice for long-term log storage?

• A. Delete logs after one month
• B. Archive the log data
• C. Verify integrity of transferred logs
• D. Store media securely

Answer: (A)

Long-term log storage relies on keeping complete, verifiable records for incident response, audits, and regulatory requirements. Deleting logs after a short period eliminates critical historical data, making it impossible to reconstruct events, verify what happened, or meet retention policies. Archiving the log data allows you to preserve older records in a more cost-effective, retrievable form, so information is still available when needed. Verifying the integrity of transferred logs ensures that copies remain exact and untampered, maintaining trust in the stored data. Storing media securely protects against loss, theft, and tampering, and supports access controls and disaster recovery. Because deleting logs after a month undermines all of these protections, it’s considered a poor practice for long-term storage.