SY0-701 Security Program Management and Oversight Practice Question
A security team is drafting a service-level agreement (SLA) with a cloud provider that will host the company's customer relationship management (CRM) system. The legal department wants to ensure that the provider is contractually obligated to notify the company of any security breach involving customer data within a specific timeframe. Which element of the SLA should the security team recommend including?
⚠ Common exam trap
The trap here is selecting a right-to-audit clause because it sounds security-related, but it does not guarantee timely notification of a breach, which is the explicit requirement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Breach notification clause
The breach notification clause is the correct element because it contractually requires the cloud provider to inform the customer of any security breach involving customer data within a specified timeframe. This enables the customer to respond appropriately and meet regulatory obligations. The other options—right-to-audit, data ownership, and uptime SLO—address different aspects of the SLA and do not satisfy the legal department's specific request for breach notification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data ownership clause
Why it's wrong here
A data ownership clause defines who owns the data stored or processed by the provider. It clarifies that the customer retains ownership, but it does not include any obligation to notify about security breaches. The scenario requires a contractual obligation for timely breach notification, which is separate from ownership rights. Thus, this clause is not the appropriate recommendation.
- ✗
Right-to-audit clause
Why it's wrong here
A right-to-audit clause allows the customer to assess the provider's security controls and practices, but it does not mandate notification of a breach. While audits can uncover issues, they are typically periodic and would not provide timely alerts during an active incident. The legal department's request is specifically about notification upon a breach, so this clause does not meet that need.
- ✗
Service level objective (SLO) for uptime
Why it's wrong here
An SLO for uptime specifies the guaranteed availability percentage of the service. It addresses performance and reliability, not security incident notification. While important for CRM availability, it does not fulfill the legal department's requirement for breach notification. The security team should focus on a clause that directly obligates the provider to report security incidents, not on uptime metrics.
- ✓
Breach notification clause
Why this is correct
A breach notification clause specifies the provider's obligation to inform the customer of a security incident, including the timeframe and method of notification. This directly addresses the legal department's requirement to be alerted promptly about any breach involving customer data. It is a standard component of SLAs for cloud services that handle sensitive information, ensuring transparency and enabling the customer to take mitigating actions.
Go deeper
Related to this question
Learn chapter
Data Breach Notification Requirements
Key term
Audit
An audit is a systematic, independent review of IT systems, processes, and controls to verify compliance with policies, standards, and regulations.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every SY0-701 question from scratch — 1,030 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.