Free CMMC-CCA Web TestEngine Demo

Q78 Single choice

John, a CCA, has been assigned by his C3PAO to conduct a CMMC assessment for an OSC. During the assessment, John notices that the OSC's security practices leave much to be desired. After speaking with the OSC's IT staff, John offers to connect them with a vendor he knows who sells a vulnerability management tool that could address some of their weaknesses.

According to the CMMC CoPC, which of the following best describes John's actions?

A
John acted appropriately by trying to help the OSC improve its security posture.
B
John did not show respect for intellectual property.
C
John's actions were deemed acceptable since he did not directly profit from connecting the OSC with the vendor.
D
John violated the principles of professionalism and objectivity by soliciting business for a third-party vendor while serving on the Assessment Team.

CMMC-CCA Web TestEngine demo