Find the shared dependency behind the second supplier
A hands-on CISSP lab. You produce the real artefact and 9 automated checks verify it behaves the way the exam expects.
Try this labAll CISSP practice
- Certification
- CISSP
- Format
- Structured configuration
- Difficulty
- hard
- Estimated time
- 35 min
- Automated checks
- 9
The brief
Edit supplier-plan.json with selected booleans for ALL option IDs, evidenceRefs arrays keyed by ALL options and allocations[event][service][option] nonnegative integers (include every key; unselected options receive zero). Select at most one mode per supplier, with at < contractUntil. Every selected option needs both required controls from referenced verified exact-option records satisfying from <= at < until. Total selected reservation cost must fit budget. A mode is usable only when its contract/assurance is current, its supplier mode is unique, the portfolio is funded and NONE of its root or transitive ALL-required dependencies fails in that event. Unselected/unsupported/down modes receive no delivery credit and must not receive positive allocations. Each option's capacity is shared by both services in the same event. An overcapacity option earns no delivery credit for either service; a service allocated above its demand earns none for that service. Meet every event-specific service minimum AND keep weightedLossNumerator <= riskLimit. That numerator sums (demand-credited service units)*service.loss*event.weight across ALL events/services; its denominator is 1000, not a supplier independence assumption. Report totalCost, dependencyClosure keyed by ALL options (complete selected root+transitive IDs, empty for unselected), served[event][service] and weightedLossNumerator. Report integer or null numeric values while unfinished. Closure arrays have set meaning; allocations are actual service units, not standby labels. Preserve working reservations and evidence while repairing a remaining allocation or report without Reset.
What the checks verify
Your work is graded on 9 independent properties, not on matching one reference answer.
- Complete typed option, evidence, allocation and report records
- One live contracted mode per actual supplier
- Exact current verified mode/control evidence
- Complete funding, shared provider capacity and bounded service demand
- Allocations use only supported unfailed dependency paths
- Every event's critical service minimum is preserved
- Actual weighted residual service loss stays within the local limit
- Full transitive selected dependency inventory
- Truthful supported capacity and weighted loss consequences
Where this sits in the CISSP blueprint
- Domain
- Security and Risk Management
- Objective
- Supply Chain Risk
- Skill
- Supplier Dependencies and Assurance
Part of CISSP preparation
Labs are written by ExamNova to teach the decisions the exam tests. They are not reproductions of vendor lab content.