CAS-002 · Question #696
Company ABC has recently completed the connection of its network to a national high speed private research network. Local businesses in the area are seeking sponsorship from Company ABC to connect…
The correct answer is B. ISA. This question tests knowledge of the agreement type used to formally document the technical security requirements between two organizations connecting their networks.
Question
Company ABC has recently completed the connection of its network to a national high speed private research network. Local businesses in the area are seeking sponsorship from Company ABC to connect to the high speed research network by directly connecting through Company ABC's network. Company ABC's Chief Information Officer (CIO) believes that this is an opportunity to increase revenues and visibility for the company, as well as promote research and development in the area. Which of the following must Company ABC require of its sponsored partners in order to document the technical security requirements of the connection?
Options
- ASLA
- BISA
- CNDA
- DBPA
How the community answered
(20 responses)- B95% (19)
- C5% (1)
Why each option
This question tests knowledge of the agreement type used to formally document the technical security requirements between two organizations connecting their networks.
A Service Level Agreement (SLA) defines performance and availability expectations for a service, not the technical security requirements of a network interconnection.
An Interconnection Security Agreement (ISA) is the document specifically designed to record the technical and security requirements that govern a direct network-to-network connection between two organizations. It covers items such as the interface characteristics, security controls, and acceptable use for the interconnection. NIST SP 800-47 identifies the ISA as the standard instrument for this purpose, making it the correct choice when technical security requirements for a connection must be documented.
A Non-Disclosure Agreement (NDA) is a legal contract protecting confidential information from disclosure, not a document that specifies technical security controls for a connection.
A Business Partnership Agreement (BPA) establishes the general terms of a business relationship and does not address the technical security specifications of a network link.
Concept tested: Interconnection Security Agreement for network connections
Source: https://csrc.nist.gov/publications/detail/sp/800-47/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.