Exam SY0-701 topic 1 question 255 discussion

Actual exam question from CompTIA's SY0-701

Question #: 255
Topic #: 1

A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of the following would provide the best proof that the hosting provider has met the requirements?

A. NIST CSF
B. SOC 2 Type 2 report
C. CIS Top 20 compliance reports
D. Vulnerability report

Show Suggested Answer

Suggested Answer: B 🗳️

by a4e15bd at Aug. 10, 2024, 2:42 p.m.

Comments

Submit Cancel

ViciousAkira

Highly Voted 7 months, 2 weeks ago

B. SOC 2 Type 2 report SOC 2 stands for System and Organization Controls 2. A SOC 2 Type 2 report provides an audit of the effectiveness of security controls over a period of time (typically 6-12 months), specifically focusing on the operating effectiveness of controls related to security, availability, processing integrity, confidentiality, and privacy. This report would demonstrate that the controls were not only in place but also effectively protecting customer data over the required period.

upvoted 7 times

...

siheom

Most Recent 9 months, 2 weeks ago

Selected Answer: B

VOTE B

upvoted 2 times

...

a4e15bd

10 months, 2 weeks ago

This report provides an audit of the service organization controls over a specified period of time like six months or more and assess how well those controls protect customers data according to predefined criteria.

upvoted 3 times

...