Exam CCAK topic 1 question 59 discussion

Should be D. The sentence only mention "desing" not mention effectiveness of the controls

B. SOC 2, TYPE 2 In this scenario, the vendor is likely providing you with a SOC 2, Type 2 report. A SOC 2, Type 2 report includes an attestation on the adequacy of the design and operating effectiveness of controls over a period of time. This type of report is specifically focused on the controls relevant to security, availability, processing integrity, confidentiality, and privacy of the system, making it suitable for assessing the control environment of a vendor providing cloud or other IT services.

SOC 2 defines the criteria for managing customer data based on five trust service principles. C,I,A, Service Integrity, and Security SOC 2 is is an auditing procedure that ensures your Service Providers securely manage your data in the interests of the organization and the privacy of its clients. The answer should be SOC2 Type 1 - Describes the Design effectiveness of the Vendor Systems whether the design meets the organizations trust principles. SOC 2 Type 2 - details the Operational Effectiveness of those systems

Yes, Type 1 is Design, Type 2 effectiveness over a Periode of time