Certificate of Cloud Auditing Knowledge (CCAK) — Question 167

Which of the following types of SOC reports BEST helps to ensure operating effectiveness of controls in a cloud service provider offering?

Answer options

• A. SOC 2 Type 1
• B. SOC 2 Type 2
• C. SOC 3 Type 2
• D. SOC 1 Type 1

Correct answer: B

Explanation

SOC 2 Type 2 reports evaluate the operational effectiveness of controls over a period, making them ideal for assessing cloud service providers. In contrast, SOC 2 Type 1 reports only assess controls at a specific point in time, and SOC 1 reports are focused on financial reporting, which is not applicable here. SOC 3 Type 2 does not provide the same level of detailed control effectiveness assessment as SOC 2 Type 2.