Free CMMC-CCA Web TestEngine Demo

Q34 Single choice

A software development company uses a cloud-based source code repository and continuous integration/ continuous deployment (CI/CD) platform to manage its software development lifecycle. The cloud service provider hosts and manages the source code repository and CI/CD platform.

Which of the following statements accurately describes how the OSC should handle the cloud service provider's assets in the CMMC Assessment Scope?

A
Exclude the cloud provider's assets from the Assessment Scope since they are not owned or managed by the company.
B
Include the cloud provider's assets in the Assessment Scope as they handle sensitive code.
C
Include the cloud service provider's assets in the certification boundary but exclude them from the assessment scope.
D
It depends on the contract between the company and the cloud provider.

CMMC-CCA Web TestEngine demo