MENU
Because cloud providers will not give detailed information out about their infrastructures and practices to the general public, they will often use established auditing reports to ensure public trust, where the reputation of the auditors serves for assurance.
Which type of audit reports can be used for general public trust assurances?
Suggested Answer: A
Get Premium CCSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
A cloud carrier is the intermediary who provides connectivity and transport of cloud services between cloud providers and cloud customers.
29 comments · newest first
CH
Cherilyn
10 months ago
SAS-70 is outdated; SOC reports are the current standard!
TH
Thurman
11 months ago
Wait, are auditors really that trustworthy?
ED
Edward
11 months ago
SOC 1 is more for financial controls, not public trust.
EU
Eulah
11 months ago
I thought SOC 3 was more reliable for that?
KR
Kristeen
11 months ago
SOC 2 is the go-to for public trust!
BE
Ben
12 months ago
SOC 1 seems more focused on financial controls, so I doubt it would be the right answer for public trust assurances.
LO
Lorrine
12 months ago
I vaguely recall SAS-70 being relevant, but I thought it was outdated now? Maybe it’s not the best choice anymore.
WI
Willow
12 months ago
I think SOC 3 is specifically designed for public consumption, right? It’s like a summary of SOC 2, which makes it easier to understand.
TA
Talia
1 year ago
I remember SOC 2 being important for service organizations, but I'm not sure if it's the best for public trust.
BE
Bettina
1 year ago
I remember learning about SAS-70 reports in class, but I thought those were being phased out in favor of the newer SOC standards. I'll have to double-check which one is the current standard for public-facing cloud audits.
IZ
Izetta
1 year ago
The key here is that the question is asking about audit reports that can be used for public trust, not just internal audits. I think SOC 3 reports are the ones designed for public disclosure, so that's my best guess.
EL
Elli
1 year ago
Hmm, I'm a bit confused on the differences between the various SOC reports. I'll need to review my notes to make sure I understand which one is used for general public trust.
SY
Sylvie
1 year ago
I'm pretty sure the answer is SOC 2 reports, since those are the standard for public trust assurances when cloud providers can't disclose their internal details.
LE
Leonida
1 year ago
This looks like a straightforward question about lambda functions in Python. I'm pretty confident I can handle this one.
CR
Craig
1 year ago
I'm not entirely sure, but I remember there was a practice question that asked something similar about defining tenants. I should have reviewed those again.
JE
Jesusita
1 year ago
C) SOC 3 sounds like the winner to me. I mean, if the auditors have a good reputation, that's gotta count for something, right?
EL
Eliseo
1 year ago
C) SOC 3 seems like the best bet. Trust in the auditors is crucial for public assurance.
SH
Shala
1 year ago
B) I agree, SOC 3 is a solid option. It's all about that assurance from reputable auditors.
AN
Annalee
1 year ago
A) SOC 3 is definitely a good choice. The reputation of the auditors is key for public trust.
SI
Simona
1 year ago
Haha, I bet the cloud providers wish they could just give us the keys to their data centers. But hey, at least they're trying to be transparent with these audit reports!
JO
Josefa
1 year ago
D) SOC 1
AN
Antonio
1 year ago
C) SOC 3
KR
Kristin
1 year ago
B) SAS-70
GR
Gracia
1 year ago
A) SOC 2
AR
Arlene
1 year ago
Hmm, I'm not sure. Maybe B) SAS-70 since it's a well-established standard, but I'm not confident that's the right answer here.
CH
Chery
1 year ago
I think the correct answer is C) SOC 3. It's specifically designed for public trust assurance, unlike the other options which are more for internal controls and audits.
ST
Stephanie
2 years ago
I believe SOC 3 can also be used for general public trust assurances, as it focuses on security, availability, processing integrity, confidentiality, and privacy.
JA
Jackie
2 years ago
I agree with Jaime, SOC 2 is commonly used for that purpose.
JA
Jaime
2 years ago
I think SOC 2 can be used for general public trust assurances.