Question 22

The document that was violated is best described as an SLA.

An SLA, or Service Level Agreement, outlines the expected level of service between a service provider and a customer, including incident response times. In this scenario, the missed incident response deadline for customer 2 indicates a failure to meet the commitments specified in the SLA.

A) KPI

Key Performance Indicators (KPIs) are metrics used to evaluate the success of an organization in achieving its objectives. While KPIs may reflect incident response metrics, they do not constitute an agreement on service levels and thus are not the document in violation in this scenario.

B) SLO

A Service Level Objective (SLO) is a specific measurable goal that is part of an SLA. While it defines the target level of service, it does not represent a contractual obligation like an SLA does. Consequently, the SLO itself cannot be regarded as the document that was violated here.

C) SLA

A Service Level Agreement (SLA) is a documented contract that specifies the expected service levels between the provider and customer, including response times for incidents. The missed incident response for customer 2 directly indicates a breach of this agreement, making SLA the correct choice.

D) MOU

A Memorandum of Understanding (MOU) is generally a non-binding agreement outlining mutual intentions between parties. It does not specify service levels or response times in the same way that an SLA does, and therefore is not relevant to the missed incident response in this case.

Conclusion

The SLA is the definitive document that was violated due to the missed incident response deadline for customer 2, as it explicitly outlines the obligations of the service provider. Other options, such as KPI, SLO, and MOU, do not encapsulate the binding nature of the commitments made between the MSSP and its customers, thus failing to accurately describe the situation.