CompTIA CASP+ (CAS-004) — Question 351

The information security manager at a 24-hour manufacturing facility is reviewing a contract for potential risks to the organization. The contract pertains to the support of printers and multifunction devices during non-standard business hours. Which of the following will the security manager most likely identify as a risk?

Answer options

• A. Print configurations settings for locked print jobs
• B. The lack of an NDA with the company that supports its devices
• C. The lack of an MSA to govern other services provided by the service provider
• D. The lack of chain of custody for devices prior to deployment at the company

Correct answer: B

Explanation

The correct answer is B because a Non-Disclosure Agreement (NDA) is crucial for protecting sensitive information shared with the support company. The other options, while important, do not directly address the confidentiality and security of proprietary information as the lack of an NDA does.