A company has an SLA with a security vendor that includes a 99.9% uptime guarantee for their monitoring platform. Over the past quarter, the platform was down for a total of 8 hours. The contract defines a service credit of 5% of monthly fees for each hour of downtime beyond the SLA. What should the security manager do?

Ask the vendor to provide a written explanation but not seek service credits.

Terminate the contract because the SLA was breached.

Ignore the downtime because 99.9% uptime is still considered good.

Calculate the service credit and apply it to the next invoice.

What is a key benefit of using clear and unambiguous messaging in vendor negotiations?

It ensures that the vendor will accept all your terms

It reduces the likelihood of misunderstandings and disputes

It allows you to hide your true objectives from the vendor

It speeds up the negotiation process by avoiding all discussion

What is the primary characteristic of a competitive (distributive) negotiation strategy?

It emphasizes building a long-term partnership with the vendor

It focuses on claiming as much value as possible from a fixed pie

It involves sharing information openly to reach a mutually beneficial agreement

It seeks to expand the overall value so both parties gain more

What is the first step in terminating a vendor relationship?

Selecting a new vendor before informing the current one

Immediately disconnecting the vendor's access to all systems

Reviewing the contract to understand termination clauses and obligations

Deleting all vendor-related documentation

Which of the following is a common risk associated with third-party vendors?

Data breaches due to inadequate security controls at the vendor

Vendor employees receiving company-sponsored training

Vendor using open-source software

GIAC Security Leadership

Domain 5Objective 1

Managing Negotiations and Vendors GSLC Practice Questions (Page 6)

Part of the Business and Vendor Management domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–22 in this domain), expect 4–7 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

10concepts

Questions 26–30

26application · easy
A company has an SLA with a security vendor that includes a 99.9% uptime guarantee for their monitoring platform. Over the past quarter, the platform was down for a total of 8 hours. The contract defines a service credit of 5% of monthly fees for each hour of downtime beyond the SLA. What should the security manager do?
Select an answer first
27foundation · easy
What is a key benefit of using clear and unambiguous messaging in vendor negotiations?
Select an answer first
28foundation · easy
What is the primary characteristic of a competitive (distributive) negotiation strategy?
Select an answer first
29foundation · easy
What is the first step in terminating a vendor relationship?
Select an answer first
30foundation · easy
Which of the following is a common risk associated with third-party vendors?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.