Managing Negotiations and Vendors GSLC Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security team has signed a contract with a new managed detection and response (MDR) vendor. The vendor is responsible for 24/7 monitoring and alerting. The team wants to ensure the vendor meets its performance commitments and maintains a good working relationship. Which ongoing practice is MOST effective for managing this vendor relationship?

   • ASchedule monthly service review meetings to discuss performance metrics, incidents, and upcoming changes.
   • BLimit communication to the contract administrator to avoid overwhelming the security team.
   • CWait until the annual contract renewal to review the vendor's performance.
   • DRely on the vendor's self-reported monthly reports without independent verification.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security manager is negotiating a contract with a security vendor that will process sensitive customer data. The vendor's standard contract includes a clause that limits liability to the amount paid under the contract. The manager is concerned about the potential financial impact of a data breach. The vendor is unwilling to remove the liability cap entirely. Which negotiation approach is MOST likely to achieve a reasonable outcome?

   • AAccept the liability cap as is, since the vendor is unwilling to change it.
   • BPropose a higher liability cap specifically for data breaches, with a carve-out for gross negligence.
   • CAsk the vendor to provide a list of their other clients to assess their risk tolerance.
   • DThreaten to terminate the negotiation if the vendor does not remove the liability cap.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security manager is finalizing a contract with a cloud security vendor. The vendor's standard terms include a limitation of liability clause that caps damages at the total contract value. The manager is concerned about a potential data breach that could cause significant financial and reputational damage. Which contract term should the manager negotiate to address this concern?

   • AA higher liability cap that specifically covers data breach incidents and their associated costs.
   • BA service credit clause that provides credits for SLA breaches.
   • CA mutual indemnification clause covering third-party claims arising from data breaches.
   • DA termination for convenience clause that allows the manager to exit the contract without cause.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which statement best describes the role of negotiation in vendor management?

   • AIt is primarily a legal process to ensure compliance with regulations.
   • BIt is a one-time event that occurs only when the initial contract is signed.
   • CIt is a formal procedure to terminate a vendor contract.
   • DIt is an ongoing process that shapes the terms of the vendor relationship and helps manage conflicts.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is selecting a vendor for a new security information and event management (SIEM) platform. The security team has defined requirements, but the procurement department insists on choosing the lowest-priced vendor. The security team has identified that the lowest-priced vendor lacks critical integration capabilities. What should the security manager do?

   • AAccept the lowest-priced vendor to maintain a good relationship with procurement.
   • BAsk the lowest-priced vendor to add the missing integrations at no extra cost.
   • CAdvocate for the vendor that best meets the requirements, using the evaluation criteria to justify the decision.
   • DRe-evaluate the requirements to see if the integration capabilities are truly necessary.
   Reveal Solution Discussion Select an answer first