How does the organization confirm compliance?

An organization falls under the compliance regulations for PCI. The organization will deploy applications in the public cloud and wants to use a public cloud provider that is PCI compliant.

How does the organization confirm compliance?
A . Provide third party audit documentation to the provider for review
B . Review the provider’s compliance controls and third party audit documentation
C . Review the provider’s infrastructure logs and access logs
D . Provide application logs to the provider for review

Answer: B