Exam CISSP topic 1 question 412 discussion

B is correct

The Service Organization Control (SOC) 2 Type 2 report provides the best attestation of detailed controls when evaluating an Identity as a Service (IDaaS) solution. The SOC 2 Type 2 report is an independent third-party audit that provides detailed information about the controls and processes implemented by a service provider. The report evaluates the service provider's controls based on the Trust Services Criteria (TSC), which include security, availability, processing integrity, confidentiality, and privacy. When evaluating an IDaaS solution, the SOC 2 Type 2 report provides assurance that the service provider has effective controls in place to manage the risks associated with providing identity and access management services. The report provides detailed information about the design and operating effectiveness of the controls, and includes a description of the service provider's policies, procedures, and processes. Overall, the SOC 2 Type 2 report provides a high level of assurance that the service provider has effective controls in place to protect the confidentiality, integrity, and availability of customer data and services

agree with B