The public health department of Google Town wants to use managed Google Play to deploy critical city applications that store public health records. Nina, the head of security has asked you to validate managed Google Play as a secure solution. What are some of the certifications the managed Play store has received that you could promote to reassure Nina? Select All Correct Responses

Managed Google Play has received several certifications that demonstrate its commitment to security and data privacy. ISO 27001 is an internationally recognized standard for information security management systems, ensuring a systematic approach to managing sensitive company information. SOC 2 and SOC 3 reports are auditing standards that assess an organization's information systems relevant to security, availability, processing integrity, confidentiality, and privacy. SOC 2 reports are detailed and restricted, while SOC 3 reports are general and publicly available, making them suitable for reassuring stakeholders like Nina. FedRAMP Moderate is incorrect because FedRAMP is a U.S. government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services used by federal agencies, and while Google Cloud has FedRAMP authorizations, Managed Google Play itself is not typically cited with a direct FedRAMP authorization in the same way as the other certifications for general enterprise use.