Back to Personnel Security

Non-Disclosure and Confidentiality Agreements

5 minutes 5 Questions

Non-Disclosure and Confidentiality Agreements are legal contracts that outline obligations to protect sensitive information and prevent unauthorized disclosures. Having employees sign these agreements as part of personnel security measures highlights the importance of handling sensitive information…

Test mode:
Start practice test
CISSP - Non-Disclosure and Confidentiality Agreements Example Questions

Test your knowledge of Non-Disclosure and Confidentiality Agreements

Question 1

A software vendor representative visited your company for meetings. You noticed them taking photos of your building. What should you do?

Correct Answer: Report the incident to your manager

By reporting the incident to your manager, you will allow them to handle the situation professionally and follow company procedures for addressing potential security breaches. The other options may escalate the situation or fail to address it adequately.

Question 2

A company is in the midst of acquisitions with a competitor, and the management has realized the need to protect sensitive information during discussions. Which of the following should be utilized?

Correct Answer: Non-Disclosure Agreement (NDA)

An NDA is a legal contract between both parties to ensure sensitive information is protected during discussions. MOU is an informal agreement between parties. CA is a broad term, whereas NDA is specifically used for sensitive information discussions. SLA, Subpoena, and AUP are unrelated to protecting sensitive information in this context.

Question 3

During an audit, it was discovered that a contractor had unauthorized access to the organization's client list. Which document would have been most effective in preventing this unauthorized access?

Correct Answer: Access Control Policy

An Access Control Policy is the most appropriate document to prevent unauthorized access to an organization's client list. This policy defines who should have access to specific resources, under what circumstances, and outlines the procedures for granting, modifying, and revoking access rights. It helps ensure that only authorized personnel can access sensitive information, such as client lists, based on their roles and responsibilities within the organization. By implementing a robust Access Control Policy, the organization could have prevented the contractor from gaining unauthorized access to the client list, as the policy would clearly define the access privileges for different user types, including contractors.

More Non-Disclosure and Confidentiality Agreements questions
12 questions (total)
Start 12 question test