Exam CCSK topic 1 question 84 discussion

From Security Guidance v4. Section 3.1.2.5: It is critical for a provider to publish, and a customer to evaluate, the scope of the assessment, and which features and services are included in the assessment.

its clearly A

For third-party audits or attestations, it is critical for providers to publish and customers to evaluate: A. Scope of the assessment and the exact included features and services for the assessment. When it comes to third-party audits or attestations, the scope of the assessment is of utmost importance. Providers should clearly publish the scope of the assessment, specifying the exact features, services, and components included in the assessment. This helps customers understand which aspects of the provider's offering have been evaluated for security, compliance, or other relevant factors. By evaluating the scope, customers can assess if the assessed components align with their specific requirements, regulatory obligations, or industry standards. It provides transparency and allows customers to make informed decisions regarding the security and compliance of the provider's offerings.

Agree with beazzlebub too

It is A

Agree with beazzlebub's answer