CAS-001 Question #198: Real Exam Question with Answer & Explanation

The correct answer is C: SLA. A Service Level Agreement (SLA) defines the formal terms of a relationship between a company and a third-party vendor before work begins. It specifies deliverables, performance metrics, uptime guarantees, response times, responsibilities, and remedies for non-compliance. Establis

Question

A company has purchased a new system, but security personnel are spending a great deal of time on system maintenance. A new third party vendor has been selected to maintain and manage the company's system. Which of the following document types would need to be created before any work is performed?

Options

AIOS
BISA
CSLA
DOLA

Explanation

A Service Level Agreement (SLA) defines the formal terms of a relationship between a company and a third-party vendor before work begins. It specifies deliverables, performance metrics, uptime guarantees, response times, responsibilities, and remedies for non-compliance. Establishing an SLA protects both parties and sets clear expectations. An ISA (Interconnection Security Agreement) is used specifically when two organizations interconnect their networks and addresses security requirements for that connection. An OLA (Operational Level Agreement) is an internal agreement between departments within the same organization. 'IOS' is not a standard document type in vendor management. Since the scenario involves an external vendor managing the company's system, an SLA is the required document.

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice