Please answer the following question:

1) A user organization outsources data hosting for manufacturing operations. Which type of SOC report would the user auditor require from the service auditor?

Group of answer choices

a) SOC 1, Type 2

b) SOC 2, Type 1

c) SOC 1, type 1

d) SOC 2, Type 2

e) The user auditor would not need a report from the service auditor.

2) Information and systems are protected against unauthorized access, unauthorized disclosure of information, and damage to systems that could compromise the availability, integrity, confidentiality, and privacy of information or systems and affect the entity's ability to meet its objectives.

This is the trust service definition of:

Group of answer choices

a) Privacy

b) Availability

c) Security

d) Processing Integrity

e) Confidentiality

3) Which SOC report does not have a limited distribution?

Group of answer choices

All have limited distribution

a) SOC 2

b) SOC 1

c) SOC 3

d) None have limited distribution

4) In a SOC 1 engagement, the service auditor should assess whether management has used suitable criteria in which of the following?

Group of answer choices

a) Evaluating whether controls were suitably deesigned to achieve the control objectives stated in the description.

b) Evaluating whether controls operated effectively throughout the specified period to achieve the control objectives stated in the description of the service organization's system.

c) Preparing its description of the service organization's system.

d) All answers are correct.

5) Which of the following is not an attribute of the description Criteria for Managements Description of the Entitys Cybersecurity Risk Management Program

Group of answer choices

a) Completeness

b) Materiality

c) Measurability

d) Relevance

e) Objectivity