CompTIA CASP+ (CAS-003) — Question 342

An organization is currently performing a market scan for managed security services and EDR capability. Which of the following business documents should be released to the prospective vendors in the first step of the process? (Choose two.)

Answer options

• A. MSA
• B. RFP
• C. NDA
• D. RFI
• E. MOU
• F. RFQ

Correct answer: C, D

Explanation

The correct answers are C (NDA) and D (RFI) because an NDA ensures confidentiality while sharing sensitive information with vendors, and an RFI helps gather information about vendors' capabilities. The other options, such as MSA, RFP, and RFQ, are typically used at later stages in the vendor selection process.