CompTIA CySA+ (CS0-003) — Question 261

Which of the following is the best reason to implement an MOU?

Answer options

• A. To create a business process for configuration management
• B. To allow internal departments to understand security responsibilities
• C. To allow an expectation process to be defined for legacy systems
• D. To ensure that all metrics on service levels are properly reported

Correct answer: B

Explanation

The correct answer is B, as an MOU is designed to clarify security responsibilities among internal departments. Options A, C, and D do not accurately represent the primary function of an MOU, which is focused on establishing mutual understanding rather than specific processes or metrics.