ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
When negotiating the SLA for a customer-facing billing API, your team needs a measurable commitment that specifically captures the provider's responsibility for keeping the service continuously accessible. Which of the following metrics should you require the provider to include?
A minimum monthly uptime percentage of 99.95% for the billing API
A 15-minute recovery point objective (RPO) for database backups
Deployment of security patches within seven days of release
Participation in an annual incident-response tabletop exercise
Availability is normally expressed as a guaranteed percentage of time the service is reachable over a defined period, often called the monthly uptime percentage. This directly measures whether customers can access the system and aligns with the availability element of the CIA triad. A recovery point objective relates to allowable data loss after an outage, not real-time accessibility. A patch-deployment window measures how quickly fixes are applied, and scheduling an annual exercise is a process control-not an availability metric. Therefore, the uptime percentage is the most appropriate service level objective for availability in the SLA.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the CIA triad in cybersecurity?
Open an interactive chat with Bash
How is monthly uptime percentage calculated in an SLA?
Open an interactive chat with Bash
What is the difference between RPO and SLA uptime percentage?
Open an interactive chat with Bash
What is the CIA triad and how does 'availability' fit into it?
Open an interactive chat with Bash
How does the '99.95% minimum monthly uptime' translate into downtime?
Open an interactive chat with Bash
What is the difference between recovery point objective (RPO) and uptime percentage?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)