Integrate Service Level Objectives and Service-Level Agreements (SLA) (e.g., Maintenance, Performance, Availability, Qualified Personnel) CSSLP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of a qualified personnel requirement that might be specified in an SLA?

   • APersonnel must have at least five years of experience in marketing.
   • BPersonnel must be available 24/7 without any time off.
   • CPersonnel must be fluent in at least three languages.
   • DPersonnel must hold a current security certification, such as CISSP.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A healthcare organization is outsourcing its IT support to a third-party provider. The SLA requires that all support staff have a current security certification and have passed a background check. The provider has hired new staff who have not yet completed the background check. The organization is concerned about compliance with the SLA. What should the organization do?

   • AAllow the new staff to work under supervision until they complete the background check
   • BTerminate the contract with the provider
   • CAccept the risk and allow the new staff to access sensitive data
   • DRequire the provider to restrict new staff from accessing sensitive data until they meet the requirements
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A financial services firm is drafting an SLA with a cloud provider for a critical trading application. The firm wants to ensure that security patches are applied within 48 hours of release, that the application is available 99.95% of the time, and that the provider reports any security incidents within 1 hour. Which SLA component should be included to address the patch requirement?

   • AAn incident response clause detailing notification procedures
   • BA maintenance window clause specifying the frequency and timing of patching
   • CA performance metric clause defining response time and throughput targets
   • DAn availability target clause specifying uptime percentage
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A government agency requires an uptime of 99.99% for its public-facing portal. The current hosting provider offers a single data center with no redundancy. The agency is concerned about meeting the availability target. What should the agency require in the SLA to meet the 99.99% uptime requirement?

   • AA performance clause that specifies a maximum response time of 500 milliseconds
   • BA redundancy and failover clause that mandates deployment across multiple availability zones
   • CA personnel clause that requires all staff to hold a security certification
   • DA maintenance clause that allows for weekly downtime of up to 1 hour
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Why is auditing an important part of SLA compliance monitoring?

   • AIt replaces the need for automated monitoring.
   • BIt guarantees that all security incidents are prevented.
   • CIt is only required when an SLA breach occurs.
   • DIt provides independent verification that the service meets its stated SLOs.
   Reveal Solution Discussion Select an answer first