CompTIA Server+ SK0-005 Practice Question

The administrator should place the identified data under a legal (litigation) hold. A legal hold suspends normal retention and purge schedules so that potentially relevant information remains intact and unaltered, satisfying the duty to preserve evidence once litigation is reasonably anticipated or underway. Simply exporting a copy gathers data but does not stop future deletions or preserve system metadata. Performing a one-time backup while allowing the automated 180-day purge exposes the organization to spoliation claims. Notifying project team members is an important part of executing the hold, yet doing only that does not disable automated deletion or ensure comprehensive preservation, so it is not the MOST appropriate first step.