Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 131:

  Which statement BEST describes a LTP?

  A. Creates DoD-licensed training
  B. Instructs a curriculum approved by CMMC-AB
  C. May market itself as a CMMC-AB Licensed Provider for testing
  D. Delivers training using some CMMC body of knowledge objectives
  B. Instructs a curriculum approved by CMMC-AB

• Question 132:

  An OSC has submitted evidence for an upcoming assessment. The assessor reviews the evidence and determines it is not adequate or sufficient to meet the CMMC practice. What can the assessor do?

  A. Notify the CMMC-AB.
  B. Cancel the assessment.
  C. Postpone the assessment.
  D. Contact the C3PAO for guidance.
  D. Contact the C3PAO for guidance.

• Question 133:

  During scoping for a CMMC Level 2 assessment, the OSC identifies an isolated test bench computer that performs diagnostics on specialized machinery and has no network connectivity. The bench occasionally prints troubleshooting logs that may include CUI. How should this test bench be categorized?

  A. CUI Asset
  B. Contractor Risk Managed Asset
  C. Specialized Asset
  D. Out-of-Scope Asset
  C. Specialized Asset

• Question 134:

  An OSC has requested a C3PAO to conduct a Level 2 Assessment. The C3PAO has agreed, and the two organizations have collaborated to develop the Assessment Plan. Who agrees to and signs off on the Assessment Plan?

  A. OSC and Sponsor
  B. OSC and CMMC-AB
  C. Lead Assessor and C3PAO
  D. C3PAO and Assessment Official
  C. Lead Assessor and C3PAO

• Question 135:

  An OSC uses a vendor service to monitor security alerts, which includes scanning internal hosts. According to CMMC definitions, this vendor is performing which function?

  A. Generating CUI
  B. Acting as a Security Protection Asset
  C. Performing CUI disposition
  D. Operating as a Restricted IS
  B. Acting as a Security Protection Asset

• Question 136:

  A CMMC Assessment Team arrives at an OSC to begin a CMMC Level 2 Assessment. The team checks in at the front desk and lets the receptionist know that they are here to conduct the assessment. The receptionist is aware that the team is arriving today and points down a hallway where the conference room is. The receptionist tells the Lead Assessor to wait in the conference room. as someone will be there shortly. The receptionist fails to check for credentials and fails to escort the team. The receptionist's actions are in direct violation of which CMMC practice?

  A. PE.L1-3.10.3: Escort visitors and monitor visitor activity
  B. PE.L1-3.10.5: Control and manage physical access devices
  C. PS.L2-3.9.1; Screen individuals prior to authorizing access to organizational systems containing CUI
  D. PS.L2-3 9.2: Ensure that organizational systems containing CUI are protected during and after personnel actions such as terminations and transfers
  A. PE.L1-3.10.3: Escort visitors and monitor visitor activity

• Question 137:

  A company is working with a CCP from a contracted CMMC consulting company. The CCP is asked where the Host Unit is required to document FCI and CUI for a CMMC Assessment. How should the CCP respond?

  A. "In the SSP. within the asset inventory, and in the network diagranY'
  B. "Within the hardware inventory, data (low diagram, and in the network diagram"
  C. "Within the asset inventory, in the proposal response, and in the network diagram"
  D. "In the network diagram, in the SSP. within the base inventory, and in the proposal response'"
  A. "In the SSP. within the asset inventory, and in the network diagranY'

• Question 138:

  Which phase of the CMMC Assessment Process includes developing the assessment plan?

  A. Phase 1
  B. Phase 2
  C. Phase 3
  D. Phase 4
  A. Phase 1

• Question 139:

  An OSC sends CUI to a subcontractor using an encrypted file-sharing platform. What is the file-sharing platform primarily doing?

  A. Generating CUI
  B. Transmitting CUI
  C. Processing CUI
  D. Destroying CUI
  B. Transmitting CUI

• Question 140:

  A CCP is assessing CM.L2-3.4.3: Track, review, approve/disapprove, and audit changes to organizational systems. Which evidence MOST directly supports this practice?

  A. User training logs
  B. Change tickets with approval workflow
  C. External penetration test report
  D. Antivirus update logs
  B. Change tickets with approval workflow