ISC2 CCSP Exam - Topic 5 Question 68 Discussion

Actual exam question for ISC2's CCSP exam

Question #: 68
Topic #: 5

Which kind of SSAE audit reviews controls dealing with the organization's controls for assuring the confidentiality, integrity, and availability of data?

ASOC 1

BSOC 2

CSOC 3

DSOC 4

Show Suggested Answer

Suggested Answer: C

The more systems that be included in the baseline, the more cost-effective and scalable the baseline is. The baseline does not deal with breaches or version control; those are the provinces of the security office and CMB, respectively. Regulatory compliance might (and usually will) go beyond the baseline and involve systems, processes, and personnel that are not subject to the baseline.

by Harrison at Mar 24, 2023, 03:27 AM

Limited Time Offer

25%

Off

Get Premium CCSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elza

8 months ago

Really? I didn't know SOC 2 was so important for data security!

upvoted 0 times

...

Gerald

8 months ago

I thought SOC 3 was just a summary report, not for detailed controls.

upvoted 0 times

...

Brendan

9 months ago

Wait, isn't SOC 1 more about financial reporting?

upvoted 0 times

...

Alise

9 months ago

Totally agree, SOC 2 covers those controls!

upvoted 0 times

...

Alberto

9 months ago

SOC 2 is the one for confidentiality, integrity, and availability.

upvoted 0 times

...

Lorean

9 months ago

SOC 3 sounds familiar, but I don't think it deals with those specific controls. I might be mixing it up with SOC 2 again.

upvoted 0 times

...

Dorthy

9 months ago

I practiced a question similar to this, and I think SOC 2 was the answer. It covers those trust service criteria we discussed.

upvoted 0 times

...

Ilona

9 months ago

I'm not entirely sure, but I feel like SOC 1 is more about financial controls, right? SOC 2 seems more relevant for data protection.

upvoted 0 times

...

Yvette

9 months ago

I think SOC 2 is the one that focuses on confidentiality, integrity, and availability. I remember studying that in relation to data security.

upvoted 0 times

...

Caprice

9 months ago

Experienced management, diversified revenue, and a strong brand are all positive attributes, so I'll eliminate those. The healthy relationship with employees seems like the odd one out here.

upvoted 0 times

...

Adelaide

9 months ago

I think the key here is to focus on the "new" part of the question. PythonScript seems like a good option for the third choice.

upvoted 0 times

...

Carmen

10 months ago

I think the answer is "B" for Hazard, because it seems to fit the description about potential consequences.

upvoted 0 times

...

Tommy

10 months ago

This seems like a straightforward VLAN design question. I think option A is the way to go - creating AP groups for each location and mapping the correct VLANs to the internal SSID.

upvoted 0 times

...

Gearldine

1 year ago

B) SOC 2, no doubt. Although a SOC 4 audit would be more fun - they'd let me try to hack into the system, right?

upvoted 0 times

Jacinta

1 year ago

C) SOC 2 is definitely the right choice for reviewing controls related to data security and availability.

upvoted 0 times

...

Scarlet

1 year ago

B) SOC 4 doesn't exist. SOC 1, SOC 2, and SOC 3 are the main types of SSAE audits.

upvoted 0 times

...

Alpha

1 year ago

A) SOC 2 is correct. It focuses on controls related to security, availability, processing integrity, confidentiality, and privacy.

upvoted 0 times

...

Detra

1 year ago

Gotta be B) SOC 2. I don't know about you, but I'm not looking forward to that information security questionnaire!

upvoted 0 times

Monte

1 year ago

It's important to make sure our controls are in place for data protection, that's why SOC 2 is crucial.

upvoted 0 times

...

Devora

1 year ago

I heard SOC 2 audits can be pretty intense, especially with the information security questionnaire.

upvoted 0 times

...

Sommer

1 year ago

Yeah, SOC 2 is definitely the one to focus on for information security.

upvoted 0 times

...

France

1 year ago

I agree, SOC 2 is the one that reviews controls for data confidentiality, integrity, and availability.

upvoted 0 times

...

Gaynell

1 year ago

Definitely SOC 2, it's all about making sure data is secure and available. The questionnaire is never fun though.

upvoted 0 times

...

Ligia

1 year ago

I've heard SOC 2 is the one that covers all those data security controls. The questionnaire is always a headache.

upvoted 0 times

...

Sherron

1 year ago

Yeah, SOC 2 is definitely the one to focus on for that. The questionnaire can be a pain though.

upvoted 0 times

...

Pedro

1 year ago

I hear you, the information security questionnaire is always a headache. But SOC 2 is crucial for data protection.

upvoted 0 times

...

Danica

1 year ago

I agree, SOC 2 is the one that reviews controls for data confidentiality, integrity, and availability.

upvoted 0 times

...

Kattie

1 year ago

Yeah, SOC 2 is definitely the one to focus on for that. The questionnaire can be a pain, though.

upvoted 0 times

...

Annett

1 year ago

I agree, SOC 2 is the one that reviews controls for data confidentiality, integrity, and availability.

upvoted 0 times

...

Pansy

1 year ago

Definitely B) SOC 2. I can already hear the auditors asking about my company's password policies and data backup procedures.

upvoted 0 times

Hyun

1 year ago

It's important to have strong controls in place to protect sensitive data and ensure it is secure and available when needed.

upvoted 0 times

...

Celeste

1 year ago

I agree, SOC 2 focuses on controls related to security, availability, processing integrity, confidentiality, and privacy.

upvoted 0 times

...

Daniel

1 year ago

I'm not sure, but I think SOC 1 is also a valid option for this type of audit.

upvoted 0 times

...

Rocco

1 year ago

B) SOC 2 seems like the logical choice here. That's the one that focuses on the org's controls over data confidentiality, integrity, and availability, right?

upvoted 0 times

...

Stefania

1 year ago

I agree with Cherilyn, SOC 2 focuses on controls related to data security.

upvoted 0 times

...

Cherilyn

1 year ago

I think the answer is SOC 2.

upvoted 0 times

...