Câu 4: CCA: CMMC Certified Assessor

An OSC seeking Level 2 certification is looking to migrate to a fully cloud-based environment. The organization would like to select a Cloud Service Provider (CSP) that can share responsibilities for CMMC Level 2 requirements. Assume that both CSPs can equally provide the technical capabilities and business value required by the business process. CSP A has SOC 2 certification and is California Consumer Privacy Act and Health Insurance Portability and Accountability Act (HIPAA) compliant. CSP B has SOC 2 and FedRAMP MODERATE certifications. Based on this information, which CSP is MOST LIKELY to be acceptable?

1. A. Both CSP A and B
2. B. CSP B — đáp án hiện tại
3. C. Neither CSP A nor B
4. D. CSP A