Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 181:

  What are CUI protection responsibilities?

  A. Shielding
  B. Governing
  C. Correcting
  D. Safeguarding
  D. Safeguarding

• Question 182:

  When assessing an OSC for CMMC: the Lead Assessor should use the information from the Discussion and Further Discussion sections in each practice because it:

  A. is normative for an OSC to follow.
  B. contains examples that an OSC must implement.
  C. is mandatory and aligns with FAR Clause 52.204-21.
  D. provides additional information to facilitate the assessment of the practice.
  D. provides additional information to facilitate the assessment of the practice.

• Question 183:

  An assessment is being completed at a client site that is not far from the Lead Assessor's home office. The client provides a laptop for the duration of the engagement. During a meeting with the network engineers, the Lead Assessor requests information about the network. They respond that they have a significant number of drawings they can provide via their secure cloud storage service. The Lead Assessor returns to their home office and decides to review the documents. What is the BEST way to retrieve the documents?

  A. Log into the secure cloud storage service to save copies of the documents on both the work and client laptops.
  B. Log into the client VPN from the client laptop and retrieve the documents from the secure cloud storage service.
  C. Log into the client VPN from the assessor's laptop and retrieve the documents from the secure cloud storage service.
  D. Use their home office workstation to retrieve the documents from the secure cloud storage service and save them to a USB stick.
  B. Log into the client VPN from the client laptop and retrieve the documents from the secure cloud storage service.

• Question 184:

  Which term describes assessing the ability of a unit equipped with a system to support its mission while withstanding cyber threat activity representative of an actual adversary?

  A. Penetration test
  B. Black hat testing
  C. Red cell assessment
  D. Adversarial assessment
  D. Adversarial assessment

• Question 185:

  Which entity specifies the required CMMC Level in Requests for Information and Requests for Proposals?

  A. DoD
  B. NARA
  C. NIST
  D. Department of Homeland Security
  A. DoD

• Question 186:

  Which entity requires that organizations handling FCI or CUI be assessed to determine a required Level of cybersecurity maturity?

  A. DoD
  B. CISA
  C. NIST
  D. CMMC-AB
  A. DoD

• Question 187:

  Which statement BEST describes the key references a Lead Assessor should refer to and use the:

  A. DoD adequate security checklist for covered defense information.
  B. CMMC Model Overview as it provides assessment methods and objects.
  C. safeguarding requirements from FAR Clause 52.204-21 for a Level 2 Assessment.
  D. published CMMC Assessment Guide practice descriptions for the desired certification level.
  D. published CMMC Assessment Guide practice descriptions for the desired certification level.

• Question 188:

  While conducting a CMMC Assessment, a Lead Assessor is given documentation attesting to Level 1 identification and authentication practices by the OSC. The Lead Assessor asks the CCP to review the documentation to determine if identification and authentication controls are met. Which documentation BEST satisfies the requirements of IA.L1-3.5.1: Identify system users. processes acting on behalf of users, and devices?

  A. Procedures for implementing access control lists
  B. List of unauthorized users that identifies their identities and roles
  C. User names associated with system accounts assigned to those individuals
  D. Physical access policy that states. "All non-employees must wear a special visitor pass or be escorted."
  C. User names associated with system accounts assigned to those individuals

• Question 189:

  When planning an assessment, the Lead Assessor should work with the OSC to select personnel to be interviewed who could:

  A. Have a security clearance
  B. Be a senior person in the company
  C. Demonstrate expertise on the CMMC requirements Provide
  D. clarity and understanding of their practice activities
  D. clarity and understanding of their practice activities

• Question 190:

  In scoping a CMMC Level 1 Self-Assessment, it is determined that an ESP employee has access to FCI. What is the ESP employee considered?

  A. In scope
  B. Out of scope
  C. OSC point of contact
  D. Assessment Team Member
  A. In scope