Exam SY0-601 topic 1 question 747 discussion

Actual exam question from CompTIA's SY0-601

Question #: 747
Topic #: 1

A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of the following would provide the best proof that the hosting provider has met the requirements?

A. NIST CSF
B. SOC 2 Type 2 report
C. CIS Top 20 compliance reports
D. Vulnerability report

Show Suggested Answer

Suggested Answer: B 🗳️

by Arishutara at Nov. 4, 2023, 4:18 p.m.

Comments

Submit Cancel

Gary_986

Highly Voted 1 year, 7 months ago

• SOC 2 - Trust Services Criteria (security controls) – Firewalls, intrusion detection, and multi-factor authentication • Type I audit – Tests controls in place at a particular point in time • Type II – Tests controls over a period of at least six consecutive months

upvoted 16 times

Elle

1 year, 4 months ago

Thank you for elaborating on this.

upvoted 1 times

...

Arishutara

Highly Voted 1 year, 7 months ago

We made it

upvoted 12 times

...

shady23

Most Recent 1 year, 1 month ago

Selected Answer: B

B. SOC 2 Type 2 report

upvoted 1 times

...

salah112

1 year, 4 months ago

Selected Answer: B

B. SOC 2 Type 2 report A SOC 2 Type 2 report (Service Organization Control 2 Type 2) would provide the best proof that the hosting provider has met security requirements over the last six months. SOC 2 Type 2 is a widely recognized framework for managing and securing customer data. It involves an independent audit of the hosting provider's controls, policies, and procedures over a specified period, typically six months to a year.

upvoted 2 times

...

ComPCertOn

1 year, 7 months ago

Selected Answer: B

is the correct answer

upvoted 3 times

...