nerdexam
CompTIA

SY0-701 · Question #555

An organization is required to provide assurance that its controls are properly designed and operating effectively. Which of the following reports will best achieve the objective?

The correct answer is C. Independent audit. An independent audit provides an unbiased assessment of the organization’s controls, verifying that they are properly designed and operating effectively. Such audits often result in formal reports, such as SOC (Service Organization Control) reports, which are specifically…

Submitted by anna_se· Mar 6, 2026Security program management and oversight

Question

An organization is required to provide assurance that its controls are properly designed and operating effectively. Which of the following reports will best achieve the objective?

Options

  • ARed teaming
  • BPenetration testing
  • CIndependent audit
  • DVulnerability assessment

How the community answered

(44 responses)
  • A
    2% (1)
  • B
    5% (2)
  • C
    93% (41)

Explanation

An independent audit provides an unbiased assessment of the organization’s controls, verifying that they are properly designed and operating effectively. Such audits often result in formal reports, such as SOC (Service Organization Control) reports, which are specifically designed to give assurance to stakeholders regarding the effectiveness of controls.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice