Free ISC2 CC Certified in Cybersecurity Actual Exam Questions - Question 8 Discussion

Guessing A because the main point is the rules around how employees use the app, not service terms or confidentiality agreements. The button is classic for Acceptable Use Policies.

A. This feels like an Acceptable Use Policy because it sets rules for how employees can use the application, not a legal contract like an NDA or SLA. The click-to-accept matches typical AUP setups.

A imo, since employees must agree to usage rules before access, it sounds like a standard Acceptable Use Policy rather than a contract like an NDA or MOU. The main focus is on authorized use.

Could it be A since it’s mainly about usage rules, not service levels or confidentiality?

B tbh, the phrase “Accept Terms” sounds a lot like a formal contract or agreement about services or performance levels, which is what SLAs cover. But since this is about employee usage and authorization rather than service quality, B can be ruled out. I’d say it’s definitely not C or D either since those focus on confidentiality and general agreements respectively. So, by eliminating the others, A fits best as it’s all about acceptable use and authorization.

D imo, the question mentions acknowledging usage rules but doesn’t involve service quality or support terms, so B feels off here. A is about usage policies, so it fits better than the others.

A imo, clicking "Accept Terms" for usage rules is classic AUP territory.

A imo. The focus on users agreeing to rules about usage fits an Acceptable Use Policy way better than anything formal like an SLA or NDA. It’s all about setting clear boundaries internally.

It’s A because the key part is permission for authorized users, typical of Acceptable Use Policies.

D imo. MOUs are more about formal agreements between organizations, not individual employee acknowledgments on usage rules. This sounds more like internal policy acceptance, so A still fits better here.

A imo. The question centers on employees agreeing to rules about how they can use the application, which is exactly what an Acceptable Use Policy covers. SLAs focus on service commitments, NDAs deal with confidentiality, and MOUs are more about agreements between parties, not user behavior rules. The click-to-accept action is a typical way to enforce an AUP.

Could it be B? A Service Level Agreement usually involves commitments about service quality, but here the focus is on user consent for usage rules, which might rule out SLA and point back to A or maybe even something else.

Maybe D, but I’m still thinking it’s A. The key part is employees have to explicitly accept terms about authorized use, which sounds like setting clear rules on what’s allowed—classic Acceptable Use Policy stuff. MOUs are more about agreements between organizations, not individual user agreements like this. Plus, SLAs and NDAs don’t really cover usage rules, so that leaves A as the best fit by process of elimination.

A imo, it’s basically a usage agreement, not a confidentiality contract.

A/C? I think it’s definitely more about usage rules than confidentiality, so NDA (C) doesn’t really fit. The fact that employees must actively accept terms about authorized use screams Acceptable Use Policy (A) to me. The others are more formal contracts or service-related agreements, which don’t match this scenario.

I’d rule out B and D right away since SLAs focus on service performance, and MOUs are more like formal agreements between parties, not individual user acknowledgements. The key here is the employee confirming they understand usage rules. That really points toward A, because it’s about acceptable use conditions. The NDA (C) doesn’t fit well since it’s about confidentiality, not general access or usage permissions. So the act of clicking “Accept Terms” to confirm authorized use definitely leans heavily into what an Acceptable Use Policy does. Does anyone see a way the other options could make se

A/C? The focus here is on acknowledging authorized use, which fits Acceptable Use Policy better than NDA. NDA would be more about confidential info, not general usage permissions.

A/D? Clicking to accept terms fits A, but could resemble a basic MOU too.

Not B, because this isn’t about service performance or uptime guarantees. Clicking “Accept Terms” about authorized use clearly points to A, an Acceptable Use Policy.

It’s A as well. The key thing here is the focus on usage being limited to authorized users, which fits an Acceptable Use Policy. The other options don’t really match—SLA is about service quality, NDA deals with confidentiality, and MOU is more of a formal partnership agreement. So this click-to-accept action aligns with enforcing the AUP.