Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 111:

  An assessor needs to get the most accurate answers from an OSC's team members. What is the BEST method to ensure that the OSC's team members are able to describe team member responsibilities?

  A. Interview groups of people to get collective answers.
  B. Understand that testing is more important that interviews.
  C. Ensure confidentiality and non-attribution of team members.
  D. Let team members know the questions prior to the assessment.
  C. Ensure confidentiality and non-attribution of team members.

• Question 112:

  During Phase 4 of the Assessment process, what MUST the Lead Assessor determine and recommend to the C3PAO concerning the OSC?

  A. Ability
  B. Eligibility
  C. Capability
  D. Suitability
  B. Eligibility

• Question 113:

  Which CMMC Levels focus on protecting CUI from exfiltration?

  A. Levels 1 and 2
  B. Levels 1 and 3
  C. Levels 2 and 3
  D. Levels 1, 2, and 3
  C. Levels 2 and 3

• Question 114:

  As defined in the CMMC-AB Code of Professional Conduct, what term describes any contract between two legal entities?

  A. Union
  B. Accord
  C. Alliance
  D. Agreement
  D. Agreement

• Question 115:

  For a CMMC Level 2 certification, which organization maintains a non-disclosure agreement with the OSC?

  A. NIST
  B. C3PAO
  C. CMMC-AB
  D. OUSD AandS
  B. C3PAO

• Question 116:

  During the review of information that was published to a publicly accessible site, an OSC correctly identifies that part of the information posted should have been restricted. Which item did the OSC MOST LIKELY identify?

  A. FCI
  B. Change of leadership in the organization
  C. Launching of their new business service line
  D. Public releases identifying major deals signed with commercial entities
  A. FCI

• Question 117:

  A machining company has been awarded a contract with the DoD to build specialized parts. Testing of the parts will be done by the company using in-house staff and equipment. For a Level 1 Self-Assessment, what type of asset is this?

  A. CUI Asset
  B. In-scope Asset
  C. Specialized Asset
  D. Contractor Risk Managed Asset
  C. Specialized Asset

• Question 118:

  While conducting a CMMC Level 2 Assessment, a CCP is reviewing an OSC's personnel security process. They have a policy that describes screening individuals prior to authorizing access to CUI, but it does not mention what organizations should be looking for in an individual. There is no link to a process or procedural document. What should the OSC evaluate when screening individuals prior to accessing CUI?

  A. They are trusted and well liked
  B. They are a hard and loyal worker
  C. Their conduct, integrity, and loyalty
  D. Their functionality, reliability, and ability to adapt
  C. Their conduct, integrity, and loyalty

• Question 119:

  Which statement is NOT a measure to determine if collected evidence is sufficient?

  A. Evidence covers the sampled organization
  B. Evidence is not required if the practice is ISO certified
  C. Evidence covers the model scope of the Assessment (Target CMMC Level)
  D. Evidence corresponds to the sampled organization in the evidence collection approach
  B. Evidence is not required if the practice is ISO certified

• Question 120:

  During Phase 1 planning, the OSC asks whether their corporate HR department should be included in the assessment scope. HR does not handle CUI but supports CUI-handling departments. What is the correct categorization?

  A. Host Unit
  B. Supporting Organization/Unit
  C. Specialized Asset
  D. Out-of-Scope Asset
  B. Supporting Organization/Unit