CompTIA Data+ DA0-002 (V2) Practice Question

PCI DSS Requirement 10.7 mandates that audit-trail history be retained for at least one year, with a minimum of three months immediately available for analysis. The most common way to achieve this is to keep the most recent quarter of log data in hot (online) storage for rapid incident response, then move the older nine months to a less-expensive archival tier-giving one full year of retention and satisfying the accessibility rule. Storing all logs in hot storage for a year exceeds the requirement but drives unnecessary cost; keeping only 90 days or purging raw records violates the one-year rule; retaining logs indefinitely is permissible but not "best" for balancing compliance and cost.