CompTIA Security+ (SY0-701) SY0-701 — Question 261

A company needs to keep the fewest records possible, meet compliance needs, and ensure destruction of records that are no longer needed. Which of the following best describes the policy that meets these requirements?