Free CMMC-CCA Web TestEngine Demo

Q80 Single choice

Sarah, a Certified CMMC Assessor, is conducting an assessment for DataSecure, a cloud service provider that hosts various applications for the Defense Industrial Base (DIB). During the assessment, Sarah encounters a complex and highly specialized cloud architecture that leverages cutting-edge technologies such as containerization, serverless computing, and advanced security controls. As Sarah reviews the evidence provided by DataSecure for the relevant CMMC practices, she realizes that some of the evidence and implementations are unlike anything she has encountered in previous assessments.

What is the most appropriate action for Sarah to take as a CCA in this scenario?

A
Request DataSecure to simplify their architecture and align with more traditional IT practices for easier evaluation.
B
Strictly adhere to a standardized assessment checklist, regardless of DataSecure's unique architecture.
C
Defer the assessment until she can receive additional training on the specific technologies used by DataSecure.
D
Thoroughly research and understand DataSecure's cloud architecture, seek clarification from subject matter experts, and evaluate the evidence within the context of their specialized environment.

CMMC-CCA Web TestEngine demo