Find the shared dependency behind the second supplier

A hands-on CISSP lab. You produce the real artefact and 9 automated checks verify it behaves the way the exam expects.

Try this labAll CISSP practice

Certification
CISSP
Format
Structured configuration
Difficulty
hard
Estimated time
35 min
Automated checks
9

The brief

Edit supplier-plan.json with selected booleans for ALL option IDs, evidenceRefs arrays keyed by ALL options and allocations[event][service][option] nonnegative integers (include every key; unselected options receive zero). Select at most one mode per supplier, with at < contractUntil. Every selected option needs both required controls from referenced verified exact-option records satisfying from <= at < until. Total selected reservation cost must fit budget. A mode is usable only when its contract/assurance is current, its supplier mode is unique, the portfolio is funded and NONE of its root or transitive ALL-required dependencies fails in that event. Unselected/unsupported/down modes receive no delivery credit and must not receive positive allocations. Each option's capacity is shared by both services in the same event. An overcapacity option earns no delivery credit for either service; a service allocated above its demand earns none for that service. Meet every event-specific service minimum AND keep weightedLossNumerator <= riskLimit. That numerator sums (demand-credited service units)*service.loss*event.weight across ALL events/services; its denominator is 1000, not a supplier independence assumption. Report totalCost, dependencyClosure keyed by ALL options (complete selected root+transitive IDs, empty for unselected), served[event][service] and weightedLossNumerator. Report integer or null numeric values while unfinished. Closure arrays have set meaning; allocations are actual service units, not standby labels. Preserve working reservations and evidence while repairing a remaining allocation or report without Reset.

What the checks verify

Your work is graded on 9 independent properties, not on matching one reference answer.

  • Complete typed option, evidence, allocation and report records
  • One live contracted mode per actual supplier
  • Exact current verified mode/control evidence
  • Complete funding, shared provider capacity and bounded service demand
  • Allocations use only supported unfailed dependency paths
  • Every event's critical service minimum is preserved
  • Actual weighted residual service loss stays within the local limit
  • Full transitive selected dependency inventory
  • Truthful supported capacity and weighted loss consequences

Where this sits in the CISSP blueprint

Domain
Security and Risk Management
Objective
Supply Chain Risk
Skill
Supplier Dependencies and Assurance

Part of CISSP preparation

Labs are written by ExamNova to teach the decisions the exam tests. They are not reproductions of vendor lab content.