Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 121:

  An assessment is being conducted at a remote client site. For the duration of the assessment, the client has provided a designated hoteling space in their secure facility which consists of a desk with access to a shared printer. After noticing that the desk does not lock, a locked cabinet is requested but the client does not have one available. At the end of the day, the client provides a printout copy of an important network diagram. The diagram is clearly marked and contains CUI. What should be done NEXT to protect the document?

  A. Take it with them to review in the evening.
  B. Leave it on the desk for review the following day.
  C. Put it in the unlocked desk drawer for review the following morning.
  D. Take a picture with the personal phone before securely shredding it.
  D. Take a picture with the personal phone before securely shredding it.

• Question 122:

  When assessing SI.L1-3.14.2: Provide protection from malicious code at appropriate locations within organizational information systems, evidence shows that all of the OSC's workstations and servers have antivirus software installed for malicious code protection. A centralized console for the antivirus software management is in place and records show that all devices have received the most updated antivirus patterns. What is the BEST determination that the Lead Assessor should reach regarding the evidence?

  A. It is sufficient, and the audit finding can be rated as MET.
  B. It is insufficient, and the audit finding can be rated NOT MET.
  C. It is sufficient, and the Lead Assessor should seek more evidence.
  D. It is insufficient, and the Lead Assessor should seek more evidence.
  A. It is sufficient, and the audit finding can be rated as MET.

• Question 123:

  Who will verify the adequacy and sufficiency of evidence to determine whether the practices and related components for each in-scope Host Unit. Supporting Organization/Unit, or enclave has been met?

  A. OSC
  B. Assessment Team
  C. Authorizing official
  D. Assessment official
  B. Assessment Team

• Question 124:

  A Level 2 Assessment was conducted for an OSC, and the results are ready to be submitted. Prior to uploading the assessment results, what step MUST the C3PAO complete?

  A. Pay an assessment submission fee.
  B. Complete an internal review of the results.
  C. Notify the CMMC-AB that submission is forthcoming.
  D. Coordinate a final briefing between the Lead Assessor and the OSC.
  B. Complete an internal review of the results.

• Question 125:

  Who makes the final determination of the assessment method used for each practice?

  A. CCP
  B. osc
  C. Site Manager
  D. Lead Assessor
  D. Lead Assessor

• Question 126:

  Which are guiding principles in the CMMC Code of Professional Conduct?

  A. Objectivity, information integrity, and higher accountability
  B. Objectivity, information integrity, and proper use of methods
  C. Proper use of methods, higher accountability, and objectivity
  D. Proper use of methods, higher accountability, and information integrity
  A. Objectivity, information integrity, and higher accountability

• Question 127:

  A dedicated local printer is used to print out documents with FCI in an organization. This is considered an FCI Asset Which function BEST describes what the printer does with the FCI?

  A. Encrypt
  B. Manage
  C. Process
  D. Distribute
  C. Process

• Question 128:

  In preparation for a CMMC Level 1 Self-Assessment, the IT manager for a DIB organization is documenting asset types in the company's SSP The manager determines that identified machine controllers and assembly machines should be documented as Specialized Assets. Which type of Specialized Assets has the manager identified and documented?

  A. loT
  B. Restricted IS
  C. Test equipment
  D. Operational technology
  D. Operational technology

• Question 129:

  A client uses an external cloud-based service to store, process, or transmit data that is reasonably believed to qualify as CUI. According to DFARS clause 252.204-7012. what set of established security requirements MUST that cloud provider meet?

  A. FedRAMP Low
  B. FedRAMP Moderate
  C. FedRAMP High
  D. FedRAMP Secure
  B. FedRAMP Moderate

• Question 130:

  In accordance with NARA directives and Chapter 33 of Title 44 (Records Management Directive), which types of data MUST have policies and procedures for disposal?

  A. All recorded digital documents
  B. All digital and recorded paper documents
  C. All digital documents and recorded media
  D. All recorded information, regardless of form or characteristics
  D. All recorded information, regardless of form or characteristics