CISA Question 39

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Evaluating the vendor memo is first step for the audit in this case to determined further actions needed.

• Chose D2

  A Service Level Agreement (SLA) is the best evidence that adequate resources are now allocated because it is a legally binding document that defines the vendor’s commitments regarding resource availability, response times, and recovery capabilities. If the SLA includes provisions ensuring that the third-party vendor will allocate the necessary hardware for disaster recovery (DR) tests and actual recovery scenarios, it provides formal assurance that the issue has been addressed.

• 2

  d for delta