Agreement Types

1. A company signs an agreement with a managed security service provider (MSSP) that guarantees 99.9% uptime for the security monitoring service, specifies that critical alerts will be acknowledged within 5 minutes and resolved within 2 hours, and includes a provision that the MSSP will issue a 15% service credit for any month where availability falls below 99.5%. What type of agreement is this?

A. Memorandum of Understanding (MOU); it documents the broad service expectations between the two parties B. Service Level Agreement (SLA); it defines minimum acceptable performance standards (uptime, response time), specific measurable thresholds, and financial penalties (service credits) for falling below those standards C. Master Service Agreement (MSA); it establishes the overall framework for the MSSP relationship D. Work Order; it specifies the deliverables for a specific MSSP engagement

2. Two government agencies sign a document expressing their intent to share threat intelligence data. The document describes the general goals of the information-sharing relationship and includes a general expectation of confidentiality, but does not specify penalties for non-compliance, does not include financial terms, and is not filed as a binding legal contract. What type of agreement is this?

A. Service Level Agreement; government agencies use SLAs to document performance expectations for interagency cooperation B. Memorandum of Understanding (MOU); it documents broad mutual intent and shared goals without creating legally binding contractual obligations or financial penalties — MOUs are commonly used in government-to-government and interagency contexts where formal contracting is not appropriate C. Non-Disclosure Agreement (NDA); the confidentiality expectation makes this an NDA D. Memorandum of Agreement (MOA); both documents define shared goals between organizations

3. A technology consulting firm and a client sign an umbrella contract establishing: standard payment terms (net 30), intellectual property ownership (client owns all work product), liability cap of $500,000, governing law (Delaware), dispute resolution by arbitration, and a 2-year term. This contract will govern all future projects between the parties, with individual project scopes defined in separate documents. What is this type of agreement?

A. Statement of Work (SOW); it defines the overall relationship framework for the consulting engagement B. Master Service Agreement (MSA); it establishes the legal framework governing the entire long-term relationship, with standard terms and conditions that apply to all future projects — individual projects will be initiated via Work Orders referencing this MSA C. Service Level Agreement (SLA); it defines performance standards for the consulting services D. Business Partners Agreement (BPA); it establishes the terms of the partnership between the consulting firm and client

4. A company shares proprietary security architecture designs with a penetration testing firm. Before sharing, the company requires the testing firm to sign a document in which only the testing firm promises to keep the designs confidential — the company does not share any confidential information in return. What type of NDA is this, and why?

A. Bilateral NDA; both parties are sharing confidential information even though only the architecture is explicitly listed B. Unilateral NDA; only one party (the company) is disclosing confidential information, and only the receiving party (the testing firm) is bound by the confidentiality obligation — unilateral NDAs flow in one direction: discloser to receiver C. Multilateral NDA; penetration testing always involves more than two parties D. Non-binding NDA; NDAs related to security testing are not legally enforceable

5. Under an existing Master Service Agreement, a company issues a document to a security consulting firm specifying: conduct a black-box penetration test of the external web application at app.company.com, deliverable is a report in the standard PTES format, testing runs from January 15-22, testing is restricted to the listed IP range only, and payment is $25,000 upon report delivery and acceptance. What is this document?

A. Rules of engagement; it defines the scope and timing of the penetration test B. Work Order / Statement of Work (SOW); it defines the specific deliverables, scope, schedule, and payment for this particular penetration test engagement under the existing MSA — SOWs translate the general MSA framework into a concrete, scoped project C. Service Level Agreement; it defines the performance standards for the penetration test D. Master Service Agreement; it is a new contract for this specific penetration test

6. Two companies form a joint venture. They sign an agreement specifying: Company A owns 60% and Company B owns 40% of the venture, major operational decisions require both parties' approval, if Company B becomes insolvent Company A has the right to buy out Company B's stake at the last agreed valuation, and the agreement includes provisions for how the joint venture will continue if one partner is affected by a natural disaster. What type of agreement is this?

A. Master Service Agreement; it establishes the legal framework for the joint venture's operations B. Business Partners Agreement (BPA); it governs the partnership relationship by specifying ownership stake (60%/40%), decision-making authority (joint approval required), and contingency provisions for financial failure and operational disruption — BPAs define how partners work together and what happens when the partnership faces challenges C. Memorandum of Agreement (MOA); it documents the specific commitments of the joint venture partners D. Non-Disclosure Agreement (NDA); the confidential nature of joint venture terms makes this an NDA

Matching: Agreement Types

Match each agreement type (1–4) to its correct description (A–D).

1SLA

2MOU

3NDA

4BPA

AA formal legal contract that documents minimum acceptable service performance including uptime guarantees, response time requirements, and financial penalties (service credits) when standards are not met

BA partnership governance agreement specifying ownership stake, joint decision-making authority, and contingency provisions for financial difficulty or operational disruption affecting either partner

CAn informal document expressing broad mutual intent and shared goals between two parties; typically not legally binding and does not specify financial penalties for non-compliance

DA formal confidentiality contract requiring authorized signatures that legally binds one or more parties to keep specified information confidential; may be unilateral, bilateral, or multilateral

Agreement Types — Quiz