Managing Negotiations and Vendors GSLC Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company is considering a vendor that provides cloud-based security analytics. The vendor is located in a country with different data protection laws. The company's data will be processed in that country. What is the most important risk mitigation step before signing the contract?

   • AConduct a data protection impact assessment and include contractual clauses for data transfer and processing.
   • BAccept the risk because the vendor is a well-known global company.
   • CAsk the vendor to encrypt all data at rest and in transit.
   • DRequire the vendor to store all data in the company's home country.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A security manager is negotiating a contract for a new security information and event management (SIEM) platform. The organization has a strict budget, and the manager has identified two potential vendors. Vendor A offers a lower price but has a weaker security track record. Vendor B is more expensive but has a strong reputation and better support. The manager's BATNA is to extend the current SIEM contract for another year. Which factor should MOST influence the manager's negotiation strategy?

   • AThe price difference between the two vendors, because the budget is the primary constraint.
   • BThe length of the current SIEM contract, because it determines the deadline for a decision.
   • CThe vendor's security track record, because security is the core requirement.
   • DThe strength of the BATNA, because a viable alternative provides leverage to negotiate better terms with both vendors.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which behavior is an example of active listening during a vendor negotiation?

   • ANodding occasionally while checking your phone
   • BParaphrasing the vendor's points to confirm understanding
   • CFocusing on your next response while the vendor is speaking
   • DInterrupting the vendor to correct a factual error
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security manager is about to negotiate a new contract with a security vendor. The manager has a clear understanding of the organization's needs and has identified a strong alternative vendor. The manager wants to achieve the best possible outcome while maintaining a positive relationship. Which approach BEST reflects the role of negotiation in vendor management?

   • ANegotiation is a collaborative process to reach a mutually beneficial agreement that aligns with the organization's goals.
   • BNegotiation is a one-time event focused on getting the lowest price possible.
   • CNegotiation is primarily about asserting power to force the vendor to accept the organization's terms.
   • DNegotiation is unnecessary if the vendor's proposal meets the organization's budget.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company has decided to terminate its contract with a security vendor due to repeated performance issues. The contract includes a 90-day transition period. What should be the security manager's first step in the termination process?

   • AImmediately remove the vendor's access to all systems and data.
   • BNotify the vendor of termination and stop all communication until the transition begins.
   • CSign a new contract with a replacement vendor before notifying the current vendor.
   • DDevelop a transition plan that includes data extraction, service handover, and communication to stakeholders.
   Reveal Solution Discussion Select an answer first