Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 11:

  In the CMMC Model, how many practices are included in Level 2?

  A. 17 practices
  B. 72 practices C. 110 practices
  C. 180 practices
  C. 180 practices

• Question 12:

  Two network administrators are working together to determine a network configuration in preparation for CMMC. The administrators find that they disagree on a couple of small items. Which solution is the BEST way to ensure compliance with CMMC?

  A. Consult with the CEO of the company.
  B. Consult the CMMC Assessment Guides and NIST SP 800-171.
  C. Go with the network administrator's ideas with the least stringent controls.
  D. Go with the network administrator's ideas with the most stringent controls.
  B. Consult the CMMC Assessment Guides and NIST SP 800-171.

• Question 13:

  A Level 2 Assessment of an OSC is winding down and the final results are being prepared to present to the OSC. When should the final results be delivered to the OSC?

  A. At the end of every day of the assessment
  B. Daily and during a final separately scheduled review
  C. Either at the final Daily Checkpoint, or during a separately scheduled findings and recommendation review
  D. Either after approval from the C3PAO. or during a separately scheduled final recommended findings review
  C. Either at the final Daily Checkpoint, or during a separately scheduled findings and recommendation review

• Question 14:

  An organization's sales representative is tasked with entering FCI data into various fields within a spreadsheet on a company-issued laptop. This laptop is an FCI Asset being used to:

  A. process and transmit FCI.
  B. process and organize FCI.
  C. store, process, and transmit FCI.
  D. store, process, and organize FCI.
  C. store, process, and transmit FCI.

• Question 15:

  Which type of evidence BEST satisfies "affirmation" for a Level 2 practice?

  A. A system log
  B. A signed policy
  C. A verbal explanation from responsible personnel
  D. An external audit report
  C. A verbal explanation from responsible personnel

• Question 16:

  During a Level 2 Assessment, the OSC has provided an inventory list of all hardware. The list includes servers, workstations, and network devices. Why should this evidence be sufficient for making a scoring determination for AC.L2-3.1.19: Encrypt CUI on mobile devices and mobile computing platforms?

  A. The inventory list does not specify mobile devices.
  B. The interviewee attested to encrypting all data at rest.
  C. The inventory list does not include Bring Your Own Devices.
  D. The DoD has accepted an alternative safeguarding measure for mobile devices.
  A. The inventory list does not specify mobile devices.

• Question 17:

  Which term describes the prevention of damage to. protection of, and restoration of computers and electronic communications systems/services, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and nonrepudiation?

  A. Cybersecurity
  B. Data security
  C. Network security
  D. Information security
  A. Cybersecurity

• Question 18:

  The evidence needed for each practice and/or process is weight for:

  A. adequacy and sufficiency.
  B. adequacy and thoroughness.
  C. sufficiency and thoroughness.
  D. sufficiency and appropriateness.
  A. adequacy and sufficiency.

• Question 19:

  When executing a remediation review, the Lead Assessor should:

  A. help OSC to complete planned remediation activities.
  B. plan two consecutive remediation reviews for an OSC.
  C. submit a delta assessment remediation package for C3PAO's internal quality review.
  D. validate that practices previously listed on the POAandM have been removed on an updated Risk Assessment.
  C. submit a delta assessment remediation package for C3PAO's internal quality review.

• Question 20:

  Which document is the BEST source for determining the sources of evidence for a given practice?

  A. NISTSP 800-53
  B. NISTSP 800-53A
  C. CMMC Assessment Scope
  D. CMMC Assessment Guide
  D. CMMC Assessment Guide