Integrate Service Level Objectives and Service-Level Agreements (SLA) (e.g., Maintenance, Performance, Availability, Qualified Personnel) CSSLP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement correctly describes the relationship between a service-level agreement (SLA) and a service-level objective (SLO)?

   • AAn SLO is a legally binding document, while an SLA is an internal engineering metric.
   • BAn SLA is a contractual commitment, while an SLO is a specific measurable target that supports the SLA.
   • CAn SLA and an SLO are interchangeable terms describing the same commitment.
   • DAn SLA defines performance targets, while an SLO defines security requirements only.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A SaaS provider has an SLA that guarantees a 99.9% availability and a 2-second response time for API calls. During a security incident, the provider implements additional logging and monitoring, which increases the response time to 3 seconds. The provider is now at risk of violating the performance SLO. What should the provider do to maintain both security and performance?

   • AAccept the performance degradation and risk violating the SLA
   • BOptimize the logging and monitoring implementation to reduce overhead
   • CRemove the additional logging to restore performance
   • DIncrease the response time SLO to 3 seconds
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A software-as-a-service (SaaS) provider is updating its SLA to include performance metrics. The provider wants to ensure that the metrics are meaningful and can be monitored. Which performance metric should the provider include to best reflect the user experience?

   • AAverage response time for the application's login page
   • BTotal amount of storage allocated to the application
   • CThe version of the operating system running on the servers
   • DNumber of servers in the production environment
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A DevOps team is integrating SLOs into their operational processes. They have an SLA that requires 99.95% availability and a maximum of 30 minutes of unplanned downtime per month. The team wants to ensure that security controls are aligned with these commitments. What should the team do?

   • AImplement automated monitoring and alerting for availability and performance metrics
   • BRemove the availability target from the SLA to avoid penalties
   • CIncrease the maintenance window to allow for more downtime
   • DDisable security controls that could cause downtime, such as automated patching
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A software company is creating an SLA for its enterprise customers. The SLA must include provisions for scheduled maintenance, performance benchmarks, and the requirement that all support engineers have a current security certification. Which set of components should the SLA include?

   • AMaintenance windows, response time targets, and personnel qualifications
   • BAvailability target, backup frequency, and training requirements
   • CPatch management schedule, throughput metrics, and background check requirements
   • DUptime percentage, data retention policy, and incident response plan
   Reveal Solution Discussion Select an answer first