Which action is part of long-term log data storage?

• A. Archive the log data
• B. Delete logs after processing
• C. Store logs on the local workstation only
• D. Ignore log integrity checks

Answer: (B)

Long-term log storage means keeping records usable and intact for years, for compliance, audits, or investigations. The action that fits this purpose is archiving the log data: moving or copying logs from active systems into a dedicated archive that is durable and cost-effective, and applying retention policies, metadata, and integrity protections. Archiving preserves the historical data while controlling storage costs and enabling future retrieval, search, and verification.

Deleting logs after processing undermines long-term retention by removing history, which you may need later for investigations or regulatory requirements. Storing logs only on a local workstation isn’t scalable or resilient, since a single machine can fail or be unavailable. Ignoring log integrity checks leaves you with untrustworthy data. Archiving aligns with long-term retention by keeping logs accessible and verifiable over time.