CompTIA CySA+ Practice Test

Which of the following agreements is used between companies and employees, between companies and contractors, and between two companies to protect information assets?

1. ISA

2. NDA

3. SLA

4. DSUA

The correct answer is: NDA

The non-disclosure agreement (NDA) is designed to protect confidential information shared between parties, such as companies and employees, companies and contractors, or between two companies. These agreements ensure that sensitive materials, trade secrets, and proprietary information are not disclosed to unauthorized individuals or entities. An NDA establishes a legal obligation for the parties involved to keep the shared information confidential for a specified duration, thereby safeguarding the information assets of the organizations involved. In contrast, the other types of agreements mentioned serve different purposes. An interconnection security agreement (ISA) focuses on the security requirements between systems, commonly in network interconnections. A service-level agreement (SLA) outlines the expected level of service between a service provider and a customer, detailing metrics and responsibilities. Finally, a data sharing and usage agreement (DSUA) is typically concerned with how data will be used and shared between entities rather than strict confidentiality. Each of these agreements has its own specific application, but the NDA is uniquely focused on the protection of sensitive information across various types of relationships.