Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 101:

  Which situation would MOST LIKELY require a NOT APPLICABLE determination?

  A. The OSC does not use VoIP technologies
  B. The OSC has outdated software
  C. The OSC lacks documentation for a practice
  D. The OSC has workstations not receiving updates
  A. The OSC does not use VoIP technologies

• Question 102:

  When scoping a Level 2 assessment, which document is useful for understanding the process to successfully implement practices required for the various Levels of CMMC?

  A. NISTSP 800-53
  B. NISTSP 800-88
  C. NISTSP 800-171
  D. NISTSP 800-172
  C. NISTSP 800-171

• Question 103:

  While developing an assessment plan for an OSC. it is discovered that the certified assessor will be interviewing a former college roommate. What is the MOST correct action to take?

  A. Do not inform the OSC and the C3PAO of the possible conflict of interest, and continue as planned.
  B. Inform the OSC and the C3PAO of the possible conflict of interest, and start the entire process over without the conflicted team member.
  C. Inform the OSC and the C3PAO of the possible conflict of interest but since it has been an acceptable amount of time since college, no conflict of interest exists, and continue as planned.
  D. Inform the OSC and the C3PAO of the possible conflict of interest, document the conflict and mitigation actions in the assessment plan, and if the mitigation actions are acceptable, continue with the assessment.
  D. Inform the OSC and the C3PAO of the possible conflict of interest, document the conflict and mitigation actions in the assessment plan, and if the mitigation actions are acceptable, continue with the assessment.

• Question 104:

  While determining the scope for a company's CMMC Level 1 Self-Assessment, the contract administrator includes the hosting providers that manage their IT infrastructure. Which asset type BEST describes the third-party organization?

  A. ESPs
  B. People
  C. Facilities
  D. Technology
  A. ESPs

• Question 105:

  The results package for a Level 2 Assessment is being submitted. What MUST a Final Report. CMMC Assessment Results include?

  A. Affirmation for each practice or control
  B. Documented rationale for each failed practice
  C. Suggested improvements for each failed practice
  D. Gaps or deltas due to any reciprocity model are recorded as met
  B. Documented rationale for each failed practice

• Question 106:

  A CCP is on their first assessment for CMMC Level 2 with an Assessment Team and is reviewing the CMMC Assessment Process to understand their responsibilities. Which method gathers information from the subject matter experts to facilitate understanding and achieve clarification?

  A. Test
  B. Examine
  C. Interview
  D. Assessment
  C. Interview

• Question 107:

  Which domains are a part of a Level 1 Self-Assessment?

  A. Access Control (AC), Risk Management
  B. Risk Management (RM). Access Control (AC), and Physical Protection (PE)
  C. Access Control (AC), Physical Protection (PE), and Identification and Authentication (IA)
  D. Risk Management (RM). Media Protection (MP), and Identification and Authentication (IA)
  C. Access Control (AC), Physical Protection (PE), and Identification and Authentication (IA)

• Question 108:

  When are contractors required to achieve a CMMC certificate at the Level specified in the solicitation?

  A. At the time of award
  B. Upon solicitation submission
  C. Thirty days from the award date
  D. Before the due date of submission
  A. At the time of award

• Question 109:

  For CMMC Assessments, during Phase 1 of the CMMC Assessment Process, which are responsible for identifying potential conflicts of information?

  A. C3PAO and OSC
  B. OSC and CMMC-AB
  C. CMMC-AB and C3PAO
  D. Lead Assessor and Assessment Team Members
  D. Lead Assessor and Assessment Team Members

• Question 110:

  Who will verify the adequacy and sufficiency of evidence to determine whether the practices and related components for each in-scope Host Unit, Supporting Organization/Unit, or enclave have been met?

  A. OSC
  B. Assessment Team
  C. Authorizing official
  D. Assessment official
  B. Assessment Team