Which two commercial terms does NIST say to understand before signing with a security service provider? Choose two.

Answer: B. The provider's requirements for early termination and extension
D. How scaling the service up or down is handled

SP 800-100's technical and architectural questions include what the provider's requirements are for early termination and extension, and how scale-up and scale-down issues are handled.

Source: NIST SP 800-100 (NIST) — Table 12-4 General Considerations