CompTIA Security+ (SY0-701) — Question 460

A company filed a complaint with its IT service provider after the company discovered the service provider's external audit team had access to some of the company's confidential information. Which of the following is the most likely reason the company filed the complaint?

Answer options

• A. The MOU had basic clauses from a template.
• B. A SOW had not been agreed to by the client.
• C. A WO had not been mutually approved.
• D. A required NDA had not been signed.

Correct answer: D

Explanation

The most likely reason for the complaint is the absence of a signed NDA, which is crucial for protecting confidential information. Without an NDA, the service provider's audit team may have had the legal right to access sensitive data, which is a breach of the company's privacy expectations. The other options refer to agreements that do not directly address the confidentiality of information.