Courseiva
← CCSP
Full test
mediumMultiple ChoiceObjective-mapped

CCSP Practice Question: Wants to assess the security controls of a cloud…

An organization wants to assess the security controls of a cloud provider before entering into a contract. What is the most efficient method?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Review a SOC 2 Type II report

Reviewing a SOC 2 Type II report provides an independent assessment of a provider's controls over time. On-site audits are costly and time-consuming. Vulnerability scanning and penetration test reports may not be available or comprehensive.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Request a penetration test report

    Why it's wrong here

    Penetration test reports are point-in-time and may not cover all controls.

  • ✗

    Conduct an on-site audit

    Why it's wrong here

    On-site audits are resource-intensive and may not be feasible pre-contract.

  • ✗

    Perform vulnerability scanning

    Why it's wrong here

    Vulnerability scanning only identifies technical weaknesses, not overall control effectiveness.

  • ✓

    Review a SOC 2 Type II report

    Why this is correct

    SOC 2 Type II reports provide a thorough, independent evaluation of controls over a period.

About these practice questions

One of 964 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.