Service Provider Management GCCC Practice Questions (Page 9)

Questions 41–44

1. 41expert · hard

   A company has an incident response plan that includes procedures for coordinating with service providers. However, during a recent incident involving a cloud provider, the company's incident response team was unable to reach the provider's security team for several hours. The incident was eventually resolved, but the delay caused concern. What should the company do to improve coordination for future incidents?

   • AAccept the delay as unavoidable because providers cannot always respond quickly.
   • BTerminate the contract with the provider and find a new one with better response times.
   • CReview the incident response coordination procedures with the provider and update the contract to include specific escalation paths and response time commitments.
   • DRely on the provider's public status page for updates during incidents.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A company has signed an SLA with a cloud backup provider. The SLA includes a monthly uptime percentage and a credit schedule for outages. The security team wants to ensure the SLA also addresses security expectations. Which addition is most appropriate?

   • AAdd a clause that the provider will use 'best efforts' to maintain security.
   • BRequire the provider to notify the company of any security incident within 24 hours.
   • CDefine specific security metrics, such as patch latency and encryption standards, with reporting requirements.
   • DInclude a statement that the provider is responsible for all security breaches.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   In a Service Level Agreement (SLA), what is the primary purpose of defining security metrics?

   • ATo replace the need for incident response procedures
   • BTo provide a marketing description of the provider's capabilities
   • CTo establish measurable expectations for the provider's security performance
   • DTo transfer liability for all security incidents to the provider
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company's cloud provider has detected a security incident that may have exposed the company's customer data. The provider has notified the company's security team, but the provider's incident response team is not sharing detailed forensic information, citing the ongoing investigation. The company's legal team needs the information to assess regulatory notification obligations. What should the company do?

   • AInvoke the incident coordination procedure defined in the contract to require the provider to share relevant forensic information
   • BTerminate the contract immediately because the provider is not cooperating
   • CAccept the provider's refusal and wait for the investigation to complete
   • DAsk the provider to provide a summary of the incident without specific forensic details
   Reveal Solution Discussion Select an answer first