Which of the following is a form of a compliance inheritance in which all or some of the cloud provider's infrastructure and services undergo an audit to a compliance standard?

Policy Audit refers to reviewing an organization's documented policies, not to compliance inheritance from a cloud provider's certified infrastructure.

In a pass-through audit, the cloud service provider undergoes a formal audit against a compliance standard (such as PCI-DSS, ISO 27001, or SOC 2), and tenants or customers can inherit the applicable portions of that compliance posture without being independently audited for the covered controls. This reduces the audit burden on cloud customers by leveraging the provider's already-certified infrastructure. It is a key concept in shared responsibility and cloud compliance models.

Third Party Audit is a general term for any audit conducted by an external body and does not specifically describe the inheritance model between provider and customer.

Compliance Audit is a generic term for any assessment verifying adherence to a standard, not specifically the inheritance mechanism described.