Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A SOC 2 Type 2 report is specifically designed to evaluate the effectiveness of a company’s security controls over a period of time—typically six months or more. It’s issued by an independent auditor and focuses on: Security, availability, processing integrity, confidentiality, and privacy How well controls are implemented and maintained Evidence of consistent protection of customer data This makes it the strongest and most recognized form of assurance for hosting providers and other service organizations.
B. SOC 2 Type 2 report SOC 2 stands for System and Organization Controls 2. A SOC 2 Type 2 report provides an audit of the effectiveness of security controls over a period of time (typically 6-12 months), specifically focusing on the operating effectiveness of controls related to security, availability, processing integrity, confidentiality, and privacy. This report would demonstrate that the controls were not only in place but also effectively protecting customer data over the required period.
VOTE B