ACI - Mod 6 Part 7

What is a Service-level Agreement (SLA)?

• A contract between a service provider and a customer that defines expectations and performance standards.

• A document outlining the general scope and objectives of a collaboration.

• A legal document to protect intellectual property.

• A formal agreement for research collaborations.

Answer explanation

A Service-level Agreement (SLA) is a contract between a service provider and a customer that defines expectations and performance standards.

Which of the following is NOT typically included in a Service-level Agreement (SLA)?

• Availability and response time.

• Resolution time for reported issues.

• General scope and objectives of a collaboration.

• Remedies or penalties for unmet service levels.

Answer explanation

General scope and objectives of a collaboration are NOT typically included in a Service-level Agreement (SLA). SLAs focus on service levels and performance metrics.

What is a Memorandum of Understanding (MOU) used for?

• To establish a mutual understanding and commitment before a final agreement.

• To define the expectations and performance standards of a service.

• To protect intellectual property and prevent unauthorized disclosure.

• To outline the availability of cloud resources.

Answer explanation

To establish a mutual understanding and commitment before a final agreement.

Which of the following statements is true about a Memorandum of Understanding (MOU)?

• It is a legally binding document.

• It is used to establish a mutual understanding and commitment.

• It outlines the availability and response time for services.

• It is used to protect confidential business information.

Answer explanation

It is used to establish a mutual understanding and commitment.

Which of the following is a key element in enhancing password security by requiring passwords to meet specific complexity rules?

• Password expiration

• Password history, reuse, and ages

• Password complexity and length

• Multi-Factor Authentication (MFA)

Answer explanation

Password complexity and length are key elements in enhancing password security by requiring passwords to meet specific complexity rules.

What is the purpose of setting a policy for password expiration?

• To ensure passwords are harder to guess

• To prevent the reuse of old, potentially compromised passwords

• To enforce a policy prohibiting reusing a certain number of previous passwords

• To require passwords to meet specific complexity rules

Answer explanation

To prevent the reuse of old, potentially compromised passwords

Which policy ensures that users constantly generate new passwords and discourages using easily guessable or weak passwords?

• Password expiration

• Password history, reuse, and ages

• Password complexity and length

• Storage and encryption

Answer explanation

Password history, reuse, and ages ensure users constantly generate new passwords and discourage using easily guessable or weak passwords.

What is the main goal of implementing a password policy as part of network hardening efforts?

• To create strong, unique passwords and promote good password management practices

• To ensure passwords are stored securely

• To educate users about password security

• To implement Multi-Factor Authentication (MFA)

Answer explanation

The main goal of implementing a password policy is to create strong, unique passwords and promote good password management practices, enhancing network security.

What is the primary goal of password education?

• To promote the use of simple passwords

• To help users understand the importance of password security

• To encourage users to share their passwords

• To reduce the number of passwords a user has

Answer explanation

The primary goal of password education is to help users understand the importance of password security.

Which of the following is NOT a factor in multi-factor authentication (MFA)?

• Something the user has

• Something the user knows

• Something the user is

• Something the user wants

Answer explanation

The correct choice is 'Something the user wants' because it is not a factor in multi-factor authentication (MFA), unlike 'Something the user has,' 'Something the user knows,' and 'Something the user is'.