[Tab 1: Corporate Cybersecurity Incident Escalation Policy (2026 Directive)] **Global IT I… — GMAT

[Tab 1: Corporate Cybersecurity Incident Escalation Policy (2026 Directive)]
Global IT Incident Escalation Rules:
- Severity 1 (Critical): Standard SLA response window is 2 hours. Exceeded response time incurs a penalty surcharge of $500 per hour. *Exception*: If the incident occurs during a pre-approved maintenance window, the SLA response window is extended by 4 hours, and no penalty surcharge is assessed if total resolution occurs within the extended window. - **Severity 2 (High)**: Standard SLA response window is 6 hours. Exceeded response time incurs a penalty surcharge of$ 200 per hour. *Exception*: Incidents resulting directly from third-party vendor API outages are capped at a maximum total penalty surcharge of $400, regardless of the duration of the SLA delay.
- Surcharge Calculation Rule: Exceeded SLA duration is rounded up to the nearest full hour before calculating hourly penalties.

[Tab 2: Q2 Enterprise Incident Log Summary]

Incident ID	Severity Level	Actual Response Time Exceeding Standard SLA	Pre-Approved Maintenance Window?	Root Cause: Vendor API Outage?
INC-201	Severity 1	3.2 hours	Yes	No
INC-202	Severity 2	5.1 hours	No	Yes
INC-203	Severity 1	1.4 hours	No	No
INC-204	Severity 2	3.8 hours	No	No

[Tab 3: Compliance Audit Memorandum (Q2 2026 Review)]
"Memorandum to Operations Management: All incidents recorded in the Q2 Enterprise Incident Log have been verified against operational logs. Incident INC-201 was confirmed to occur entirely within pre-approved maintenance window #MNT-904. Incident INC-202 was verified by cloud system telemetry to stem directly from a major upstream vendor API outage. All other incidents were standard operational failures."

Based on the information provided across all three tabs, what is the total penalty surcharge assessed to the organization for all four incidents in Q2 2026?

$2,200Cevap
B
$4,200
C
$5,000
D
$2,600
E
$1,940

Cevap

The total penalty surcharge assessed for all four incidents in Q2 2026 is $2,200.

Synthesizing data across all three tabs reveals specific rules and exceptions for each incident: INC-201 incurs

0 due to pre-approved maintenance extension; INC-202 is capped at

400 due to vendor API outage root cause; INC-203 incurs

1,000 (1.4 hours rounded up to 2 hours ×

500); INC-204 incurs

800 (3.8 hours rounded up to 4 hours ×

200). Summing these yields $2,200.

Adım Adım Çözüm

Evaluate INC-201 using Tab 1 policy and Tab 3 memo details.

SLA exceeded by 3.2 hours. Since INC-201 occurred during a pre-approved maintenance window (Tab 3), the SLA window is extended by 4 hours. Because 3.2 hours ≤ 4 hours, no penalty surcharge is assessed ($0).

Applying the conditional maintenance exception from Tab 1.

Evaluate INC-202 using Tab 1 policy and Tab 3 memo details.

SLA exceeded by 5.1 hours (rounds up to 6 hours). Standard calculation would be 6 ×

200 =

1,200. However, because root cause was a third-party vendor API outage (Tab 3), the penalty is capped at $400.

Applying the vendor API outage maximum surcharge cap rule.

Evaluate INC-203 using Tab 1 policy.

SLA exceeded by 1.4 hours, which rounds up to 2 full hours. Penalty = 2 ×

500 =

1,000.

Standard Severity 1 surcharge rate with full-hour round-up rule.

Evaluate INC-204 using Tab 1 policy.

SLA exceeded by 3.8 hours, which rounds up to 4 full hours. Penalty = 4 ×

200 =

800.

Standard Severity 2 surcharge rate with full-hour round-up rule.

Synthesize total surcharges across all four incidents.

0 (INC-201) +

400 (INC-202) +

1,000 (INC-203) +

800 (INC-204) = $2,200.

Summing individual incident penalties.

Anahtar Kavram

Multi-Source Policy and Metric Synthesis

Soru

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Konular

Bu konudan daha fazla soru