Free Printable CompTIA Security+ (SYO-701) Obj 5

Worksheets

CompTIA Security+ (SYO-701) Obj 5

Total questions: 24

Worksheet time: 12mins

Name

Class

Date

Which of the following BEST represents a primary goal when seeking evidence of internal audits from a third-party vendor?

Assessment of external threat landscape to reduce security vulnerabilities.

Verification of compliance with internal security standards.

Determination of the vendor's profit margins.

Review of the vendor's client list.

Which agreement type outlines the specific services to be provided by the vendor, along with associated timelines and costs?

MSA

MOA

SOW

SLA

Kelly Innovations LLC is in the process of selecting a new vendor for their cloud storage solutions. As part of the selection process, the IT manager, Jamario, reviews the potential vendor's past financial stability, customer reviews, and history of cybersecurity incidents. Which aspect of the vendor selection process is Jamario emphasizing?

Service-level agreement

Due diligence

Non-disclosure agreement

Supply chain analysis

Dion Training is considering a collaboration with a new IT service vendor. To ensure compliance and adherence to industry standards, Dion Training wishes to see verifiable evaluations of the vendor's security controls and practices. Which of the following would provide Dion Training with insights into the vendor's own internal evaluations of their security measures?

External penetration test reports

Customer testimonials

Evidence of internal audits

Regulatory compliance certificates

What part of a BPA for mission essential functions provides a detailed, step-by-step description of the procedural tasks performed?

Hardware

Outputs

Process flow

Inputs

Which type of agreement defines the terms of a partnership between two organizations and how they will collaborate on specific projects or initiatives?

SLA

BPA

MSA

MOU

An organization hires a third-party vendor to handle its data storage needs. To ensure data confidentiality and establish clear expectations around responsibilities, they sign a document that outlines security controls, availability requirements, and confidentiality clauses. Which type of agreement is this document?

Business Partnership Agreement (BPA)

Memorandum of Understanding (MOU)

Data Use Agreement (DUA)

Service Level Agreement (SLA)

Business Partnership Agreement (BPA)

Memorandum of Understanding (MOU)

Data Use Agreement (DUA)

Service Level Agreement (SLA)

Abdul has suggested that his company perform a supply chain analysis of all of the company's vendors. This will be expensive and time consuming. Why is it important that the company conduct a supply chain analysis despite the costs?

To evaluate the vendor's financial stability so the supply chain won't be broken due to a bankruptcy or closing.

To identify potential security risks associated with the vendor's supply chain.

To determine the vendor's customer satisfaction ratings so that only the best suppliers are chosen.

To assess the vendor's compliance with legal regulations, so the company will remain in compliance.

10.

What type of assessment should you do to evaluate the security measures and vulnerabilities of a company that offers goods or services?

Statement of Work

Vendor monitoring

Vendor assessment

Vendor selection

11.

Which of the following involves an authorized testing of the security of a third-party by actively engaging the third-party's system?

Penetration testing

Vendor monitoring

Supply chain analysis

Vendor assessment

12.

Which of the following types of conflict of interest may occur when a vendor has a possibility of earning commissions that could influence their recommendations during vendor assessments?

Insider information

Competitive relationships

Personal relationships

Financial interests

13.

Globex Corporation is looking to enter into a long-term business relationship with a vendor to provide IT services. They want to establish the general terms and conditions that will apply to future agreements with the vendor. Which type of agreement do they want to set up?

SOW

MSA

SLA

MOU

14.

Which of the following aspects is NOT typically addressed in a Business Partnership Agreement (BPA) between two collaborating entities?

Responsibilities for software updates

Profit-sharing arrangements

Exit strategies

Ownership of intellectual property

15.

What is the purpose of a security analyst doing due diligence in the vendor selection process?

To ensure that the chosen vendor is the best choice among the list of possible vendors

To ensure that the vendor's practices align with the organization's requirements

To assess the vendor's ability to provide the goods or services when they have promised

To compare multiple vendors' suppliers to ensure they are all diligent in analyzing their own supply chains.

16.

Trent has been put in charge of checking his company's vendors to ensure they are complying with the security levels that are contained in the contracts. He evaluates their security on a regular basis to ensure continued compliance. Which of the following is now part of Trent's duties?

Vendor monitoring

Compliance Reporting

Vendor assessment

Vendor selection

17.

In the context of privacy compliance, which of the following describes the role of a data controller?

The entity responsible for determining why data is processed.

The organization that handles data retention and storage.

The external auditor responsible for privacy compliance checks.

The individual whose data is being processed.

18.

A cloud service provider recently underwent an audit to confirm their compliance with international data security standards. The final report provided by the auditors served as an attestation of the provider's security measures. What does this attestation signify to the cloud service provider's clients?

It certifies that the provider's services are the most cost-effective in the market.

It acknowledges the provider's marketing strategies are effective.

It guarantees that the security controls are impenetrable and all data is securely held.

It assures that the provider's security controls comply with established standards.

19.

What is the primary purpose of internal compliance reporting?

To prove to third party auditors that a company is complying with its internal processes

To report compliance status to the public

To provide compliance updates to the organization's management

To request additional information from agencies that are in charge of compliance

20.

Horizon Security, a cybersecurity training company, experienced a data breach due to a vendor's negligence. This breach led to a significant loss of sensitive customer information. Which type of consequence is Horizon MOST likely to face immediately?

Loss of license

Fines

Reputational damage

Sanctions

21.

A financial services company is required to submit regular documentation demonstrating adherence to regulatory security standards. This documentation includes audit results, risk assessments, and evidence of data protection measures. What is this process called?

Configuration Management

Risk Management

Compliance Reporting

Incident Response

22.

In the context of compliance monitoring, which of the following does "due diligence/care" refer to?

Automated compliance checks.

Taking steps to meet legal and other requirements.

Conducting internal audits on a regular basis.

Reviewing third-party vendor agreements.

23.

Which of the following terms refer to situations in which specific laws and regulations set by a country's government dictate how the personal data of its citizens should be collected, stored, and processed?

General Data Protection Regulation (GDPR)

National legal implications

Data encryption

Consent management

24.

Which of the following is a monetary penalty imposed as a result of non-compliance with regulations or violations of certain rules or agreements?

Deductible

Fine

Fee

Sanction

Reset

CompTIA Security+ (SYO-701) Obj 5

Total questions: 24

Worksheet time: 12mins

Similar Resources on Wayground