CAS-003 Question #786: Real Exam Question with Answer & Explanation

The correct answer is C: Business impact analysis. This answer key appears to contain an error. The correct answer is E - Service Level Agreement (SLA). An SLA is a formal document that defines the expected level of service, response times, availability targets, and responsibilities between a service provider (the security team)

Question

Which of the following BEST sets expectation between the security team and business units within an organization?

Options

ARisk assessment
BMemorandum of understanding
CBusiness impact analysis
DBusiness partnership agreement
EServices level agreement

Explanation

This answer key appears to contain an error. The correct answer is E - Service Level Agreement (SLA). An SLA is a formal document that defines the expected level of service, response times, availability targets, and responsibilities between a service provider (the security team) and its internal or external customers (business units). This directly 'sets expectations.' A Business Impact Analysis (C) evaluates the potential consequences of disruptions to business functions and helps prioritize recovery - it is an input to planning, not an expectation-setting agreement between teams. A Memorandum of Understanding (B) establishes general intent between parties but lacks the binding specificity of an SLA. A Risk Assessment (A) identifies and ranks risks. A Business Partnership Agreement (D) governs external commercial relationships. The SLA is the tool specifically designed to define and communicate service expectations.

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice