Answers

1. B. A breach in the SLA allows the organization to demand monetary credit.
2. C. Non-disclosure agreements protect the intellectual property and interests of the organization.
3. D. Non-disclosure agreements are agreed upon and signed within the organization and by third parties. All the other options are the results of an external audit.
4. C. Baseline controls are set as part of configuration management.
5. D. The granted exceptions should be verified at least annually.
6. D. The CAB should consist of all relevant stakeholders.