exam questions

Exam CISM All Questions

View all questions & answers for the CISM exam

Exam CISM topic 1 question 457 discussion

Actual exam question from Isaca's CISM
Question #: 457
Topic #: 1
[All CISM Questions]

Which of the following provides the MOST assurance that a third-party hosting provider will be able to meet availability requirements?

  • A. The third party's business continuity plan (BCP)
  • B. The third party's incident response plan
  • C. Right-to-audit clause
  • D. Service level agreement (SLA)
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
AlexJacobson
Highly Voted 9 months, 2 weeks ago
Selected Answer: C
I'd go with C. SLA = expectations Right-to-audit = assurance
upvoted 5 times
Thavee
7 months ago
SLA = Service Level Agreement, I agreed to marry her means I will marry her not expect to marry her. Right to audit -> right to inspect. How do you know if the provider will pass the audit? Answer would be SLA. SLA is a commitment. Client does not care what it takes to make commitment realistic.
upvoted 2 times
...
...
SHERLOCKAWS
Most Recent 1 month, 2 weeks ago
Selected Answer: D
Answer is D: because an SLA is the strongest form of assurance that the provider will meet defined availability expectations. Right-to-audit is an important contractual clause but more about monitoring and accountability, not assurance of specific uptimes.
upvoted 1 times
...
Thavee
7 months ago
Selected Answer: D
SLA = Service Level Agreement-> commitment Right to audit -> right to inspect/check/verify the correctness. How do you know if the provider will pass the audit? Answer would be SLA. SLA is a commitment. Client does not care what it takes to make commitment realistic. Follows SLA or being penalized/prosecuted.
upvoted 4 times
...
shervin2s
7 months, 3 weeks ago
Selected Answer: D
How do you get assured through audit of availibility without SLA in place
upvoted 1 times
...
yottabyte
7 months, 3 weeks ago
Selected Answer: C
C, i second AlexJacobson's explanation.
upvoted 1 times
...
xcjxcj
8 months, 3 weeks ago
Selected Answer: D
Both C and D are contract term, C reserve audit rights, D is on written clause. I believe in D
upvoted 1 times
...
King21
11 months, 3 weeks ago
A periodic audit is the most effective method to ensure that the service provider is complying with the security requirements of the service receiver. An SLA should include clauses concerning the right to audit the system and the processes of the service provider.
upvoted 1 times
...
wickhaarry
1 year, 1 month ago
C. Right-to-audit clause
upvoted 3 times
...
richck102
1 year, 4 months ago
Selected Answer: D
D. Service level agreement (SLA)
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago