CAS-003 · Question #918
A company's potential new vendors are asking for detailed network and traffic information so they can properly size a firewall. Which of the following would work BEST to protect the company's…
The correct answer is D. Asking each vendor to sign an NDA. Before sharing sensitive network details with potential vendors, a company should require an NDA to legally obligate each vendor to keep that information confidential during the procurement process.
Question
A company's potential new vendors are asking for detailed network and traffic information so they can properly size a firewall. Which of the following would work BEST to protect the company's sensitive information during the procurement process?
Options
- AIssuing an appropriate public RFP
- BRequiring each vendor to sign an MSA
- CSubmitting an RFQ to each vendor
- DAsking each vendor to sign an NDA
How the community answered
(35 responses)- B3% (1)
- C3% (1)
- D94% (33)
Why each option
Before sharing sensitive network details with potential vendors, a company should require an NDA to legally obligate each vendor to keep that information confidential during the procurement process.
An RFP (Request for Proposal) is a public-facing solicitation document that broadens the distribution of requirements rather than restricting disclosure of sensitive internal information.
An MSA (Master Service Agreement) defines the ongoing terms of an established business relationship and is executed after vendor selection, so it does not protect sensitive data shared during the pre-selection phase.
An RFQ (Request for Quotation) is used to solicit pricing from vendors and creates no confidentiality or data protection obligations on the vendor.
An NDA (Non-Disclosure Agreement) is a legally binding contract that prohibits vendors from disclosing or misusing confidential information shared during pre-contract discussions. It is the standard mechanism to protect sensitive network topology and traffic data before a formal business relationship exists, and it creates enforceable liability if a vendor violates the agreement.
Concept tested: NDA use to protect data during vendor procurement
Source: https://csrc.nist.gov/publications/detail/sp/800-161/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.