CompTIA Security+ (SY0-701) — Question 389

Several customers want an organization to verify its security controls are operating effectively and have requested an independent opinion. Which of the following is the most efficient way to address these requests?

Answer options

• A. Hire a vendor to perform a penetration test
• B. Perform an annual self-assessment.
• C. Allow each client the right to audit
• D. Provide a third-party attestation report

Correct answer: D

Explanation

The correct answer is D, providing a third-party attestation report, as it offers an independent evaluation of the organization's security controls, which can instill more confidence in clients. Options A and B involve internal assessments that may lack objectivity, while C could be logistically complex and impractical for the organization.