Câu 31: CCAK: Certificate of Cloud Auditing Knowledge

Which best describes the difference between a type 1 and a type 2 SOC report?

1. A. A type 2 SOC report validates the operating effectiveness of controls whereas a type 1 SOC report validates the suitability of the design of the controls. — đáp án hiện tại
2. B. A type 2 SOC report validates the suitability of the design of the controls whereas a type 1 SOC report validates the operating effectiveness of controls.
3. C. A type 1 SOC report provides an attestation whereas a type 2 SOC report offers a certification.
4. D. There is no difference between a type 2 and type 1 SOC report.