CompTIA CASP+ Practice Test

To assist in selecting a specific brand and model of IPS, which document should a security administrator use to gather information from multiple vendors?

1. RFP

2. RFI

3. RFQ

4. Purchase order

The correct answer is: RFI

The correct answer is to use a Request for Information (RFI). This document is designed to gather detailed information from multiple vendors about their products, capabilities, services, and other aspects before making a purchasing decision. An RFI typically asks vendors to provide information on specific features, compliance with security standards, technical specifications, and support options available for their Intrusion Prevention Systems (IPS). The purpose of an RFI is to gain a comprehensive understanding of the options available in the market, allowing the security administrator to make an informed decision based on the gathered information. It sets the stage for further inquiries and potentially leads to a Request for Proposal (RFP) if further qualifications are required. In contrast, a Request for Proposal (RFP) often follows an RFI and is focused on soliciting specific proposals from vendors that detail how they would fulfill the needs outlined by the organization. A Request for Quotation (RFQ) is used when the organization already knows what it wants and seeks price quotes for the same product or service. A purchase order is a document used to finalize a transaction after a vendor has been selected, rather than for gathering information.