Resource and Vendor Management CISA Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the purpose of a Service Level Agreement (SLA) in vendor management?

   • ATo list all the hardware and software the vendor will use
   • BTo define the expected performance and quality of services provided by the vendor
   • CTo outline the vendor's internal management structure
   • DTo provide a detailed budget for the services
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A regional bank is migrating its core banking application to a new data center. The migration must occur over a weekend to minimize disruption. The IT manager must ensure that the right people with the right skills are available at the right time. Which of the following is the MOST important action to take during the resource planning phase?

   • ACreate a detailed project schedule that assigns specific tasks to named individuals and confirms their availability for the migration weekend.
   • BDevelop a training program for all IT staff to ensure they are familiar with the new data center environment.
   • CPurchase additional hardware and software licenses to ensure the new data center has sufficient capacity for the application.
   • DNegotiate with the data center provider to extend the migration window to two weekends to reduce pressure on staff.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company has an SLA with a cloud provider that includes a 99.95% uptime guarantee and a penalty clause for non-compliance. The provider has experienced several outages in the past quarter, and the company's internal monitoring shows that uptime was below the SLA target. The provider disputes the company's measurements, claiming that their own monitoring shows compliance. Which of the following is the MOST appropriate action for the company to take?

   • AImmediately terminate the contract and switch to a different provider.
   • BPublicly report the provider's non-compliance to pressure them into accepting the company's measurements.
   • CReview the SLA to determine the agreed-upon measurement methodology and dispute resolution process.
   • DAccept the provider's measurements to maintain a good relationship.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A financial services firm has signed an SLA with a cloud provider that guarantees 99.9% uptime. The firm's internal audit team wants to verify compliance with the SLA. Which of the following is the MOST effective way to monitor this?

   • ARely on the provider's public marketing materials that claim high reliability.
   • BConduct an annual survey of internal users to gauge their satisfaction with the service.
   • CPerform a one-time penetration test to assess the security of the provider's infrastructure.
   • DReview the provider's monthly uptime reports and compare them against the SLA target.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the purpose of using Key Performance Indicators (KPIs) in vendor performance monitoring?

   • ATo measure the vendor's performance against agreed-upon targets
   • BTo ensure that the vendor is using the latest technology
   • CTo determine the vendor's internal employee satisfaction
   • DTo calculate the exact cost of the vendor's services
   Reveal Solution Discussion Select an answer first