Certified Information Systems Security Professional (CISSP) — Question 465

What is considered the BEST explanation when determining whether to provide remote network access to a third-party security service?

Answer options

• A. Contract negotiation
• B. Supplier request
• C. Business need
• D. Vendor demonstration

Correct answer: C

Explanation

The correct answer is 'C: Business need' because the primary consideration should be whether the access aligns with the organization's operational requirements. Options A, B, and D focus on contractual or procedural aspects rather than the underlying necessity for business operations.