Integrate Service Level Objectives and Service-Level Agreements (SLA) (e.g., Maintenance, Performance, Availability, Qualified Personnel) CSSLP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which item is typically included in an SLA to define when planned maintenance can occur?

   • AData retention policy
   • BMaintenance window
   • CIncident response plan
   • DUser training schedule
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A managed security service provider (MSSP) has an SLA with a client that includes a 15-minute response time for security incidents and a monthly report on compliance. The MSSP wants to demonstrate compliance with the SLA. What should the MSSP implement to monitor and report on SLA compliance?

   • AA firewall that blocks all incoming traffic
   • BA manual spreadsheet to track incident response times
   • CA security information and event management (SIEM) system that logs incidents and generates compliance reports
   • DA backup system that stores copies of all data
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does specifying patching activities in an SLA contribute to security?

   • AIt eliminates the risk of vulnerabilities in the software.
   • BIt removes the need for vulnerability scanning.
   • CIt guarantees that no new vulnerabilities are introduced during patching.
   • DIt ensures that security patches are applied in a timely and predictable manner.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A large enterprise has an SLA with a cloud provider that includes a monthly maintenance window of 4 hours. The enterprise's security team wants to apply critical security patches within 24 hours of release. The provider has refused to extend the maintenance window, citing the impact on availability. What is the best approach to meet both the patching requirement and the availability target?

   • AReduce the availability target to allow for more maintenance time
   • BSwitch to a different provider that offers 24/7 patching
   • CNegotiate an emergency patching clause that allows for out-of-window patching with a shorter notice period
   • DAccept the risk and wait for the next scheduled maintenance window
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Why is it important for an SLA to specify a maintenance window for applying security patches?

   • ATo ensure patches are applied without any downtime.
   • BTo guarantee that all patches are applied immediately upon release.
   • CTo eliminate the need for change management processes.
   • DTo balance the need for timely security updates with the impact on service availability.
   Reveal Solution Discussion Select an answer first