Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 161:

  A Lead Assessor finds that a practice was implemented only two months ago, but requires six months of evidence for recurring activities. How should the practice be scored?

  A. MET because implementation has begun
  B. MET because partial evidence is acceptable
  C. NOT MET because required evidence period is incomplete
  D. NOT MET unless the OSC provides an attestation letter
  C. NOT MET because required evidence period is incomplete

• Question 162:

  Which statement BEST describes the requirements for a C3PA0?

  A. An authorized C3PAO must meet some DoD and all ISO/IEC 17020 requirements.
  B. An accredited C3PAO must meet all DoD and some ISO/IEC 17020 requirements.
  C. AC3PAO must be accredited by DoD before being able to conduct assessments.
  D. A C3PAO must be authorized by CMMC-AB before being able to conduct assessments.
  D. A C3PAO must be authorized by CMMC-AB before being able to conduct assessments.

• Question 163:

  The Assessment Team has completed the assessment and determined the preliminary practice ratings. The preliminary practice ratings must be shared with the OSC prior to being finalized for submission. Based on this information, the assessor should present the preliminary practice ratings:

  A. During the final Daily Checkpoint
  B. After discussing with the CMMC-AB
  C. Via email after the final Daily Checkpoint
  D. Over the phone after the final Daily Checkpoint
  A. During the final Daily Checkpoint

• Question 164:

  Who is responsible for ensuring that subcontractors have a valid CMMC Certification?

  A. CMMC-AB
  B. OUSD AandS
  C. DoD agency or client
  D. Contractor organization
  D. Contractor organization

• Question 165:

  As part of CMMC 2.0, the change to Level 1 Self-Assessments supports "reduced assessment costs" allows all companies at Level 1 (Foundational) to:

  A. to conduct self-assessments.
  B. opt out of CMMC Assessments.
  C. have assessment costs reimbursed by the DoD.
  D. pay no more than $500.00 for their annual assessment.
  A. to conduct self-assessments.

• Question 166:

  Which of the following would be considered an appropriate artifact for CM.L2-3.4.1: Establish and maintain baseline configurations?

  A. Emergency evacuation plan
  B. System default manufacturer documentation
  C. Configuration baseline document with version control
  D. List of personnel allowed to request software changes
  C. Configuration baseline document with version control

• Question 167:

  Which situation MOST clearly represents a conflict of interest during an assessment?

  A. Assessing an OSC where the assessor knows an employee socially
  B. Assessing an OSC where the assessor previously provided paid consulting
  C. Assessing an OSC subcontractor in the same industry
  D. Assessing an OSC with a prior business referral
  B. Assessing an OSC where the assessor previously provided paid consulting

• Question 168:

  Which MINIMUM Level of certification must a contractor successfully achieve to receive a contract award requiring the handling of CUI?

  A. Level 1
  B. Level 2
  C. Level 3
  D. Any level
  B. Level 2

• Question 169:

  Which document BEST determines the existence of FCI and/or CUI in scoping an assessment with an OSC?

  A. OSC SSP
  B. OSC POAandM
  C. OSC Evidence
  D. OSC Contract with DoD
  D. OSC Contract with DoD

• Question 170:

  In the CMMC Model, how many practices are included in Level 1?

  A. 15 practices
  B. 17 practices
  C. 72 practices
  D. 110 practices
  A. 15 practices