97) For third-party audits or attestations what is critical for providers to publish and customers to evaluate?

A Full API access to all required services

B Scope of the assessment and the exact included features and services for the assessment right

C Network or architecture diagrams including all end point security devices in use

D Service-level agreements between all parties

E Provider infrastructure information including maintenance windows and contracts

Which one is the answer?