exam questions

Exam CCSP All Questions

View all questions & answers for the CCSP exam

Exam CCSP topic 1 question 291 discussion

Actual exam question from ISC's CCSP
Question #: 291
Topic #: 1
[All CCSP Questions]

Audits are either done based on the status of a system or application at a specific time or done as a study over a period of time that takes into account changes and processes.
Which of the following pairs matches an audit type that is done over time, along with the minimum span of time necessary for it?

  • A. SOC Type 2, one year
  • B. SOC Type 1, one year
  • C. SOC Type 2, one month
  • D. SOC Type 2, six months
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
SOC Type 2 audits are done over a period of time, with six months being the minimum duration. SOC Type 1 audits are designed with a scope that's a static point in time, and the other times provided for SOC Type 2 are incorrect.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
MaciekMT
1 month, 2 weeks ago
Selected Answer: D
SOC (System and Organization Controls) reports assess the security, availability, processing integrity, confidentiality, and privacy of a system or application. SOC Type 2 reports are conducted over a period of time, evaluating how security controls function over an extended duration rather than at a single point in time. The minimum period required for a SOC Type 2 audit is typically six months, though some auditors may accept shorter periods under special circumstances.
upvoted 1 times
...
akg001
5 months ago
Selected Answer: D
D. SOC Type 2, six months
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago