Questão 36 — CompTIA SY0-701 CompTIA Security+ Certification Exam
The Chief Information Officer (CIO) asked a vendor to provide documentation detailing the specific objectives within the compliance framework that the vendor's services meet. The vendor provided a report and a signed letter stating that the services meet 17 of the 21 objectives. Which of the following did the vendor provide to the CIO?
- A. Penetration test results
- B. Self-assessment findings
- C. Attestation of compliance
- D. Third-party audit report
Resposta correta:
C
Explicação
Explanation: Correct answer: C. Attestation of compliance The vendor provided a signed letterstating that their services meet specific compliance objectives. This signed, formal statement is known as an attestation. An attestation is a vendor's formal declaration or certification that they meet certain requirements or standards. It differs from a full audit (which would be conducted by an independent third party) or a SOC report (which is a detailed compliance report), though the documentation provided supports the attestation claim.
Quer todas as 907 questões por R$ 1,00?