Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 201:

  When are data and documents with legacy markings from or for the DoD required to be re-marked or redacted?

  A. When under the control of the DoD
  B. When the document is considered secret
  C. When a document is being shared outside of the organization
  D. When a derivative document's original information is not CUI
  C. When a document is being shared outside of the organization

• Question 202:

  A CCP is providing consulting services to a company who is an OSC. The CCP is preparing the OSC for a CMMC Level 2 assessment. The company has asked the CCP who is responsible for determining the CMMC Assessment Scope and who validates its CMMC Assessment Scope. How should the CCP respond?

  A. "The OSC determines the CMMC Assessment Scope, and the CCP validates the CMMC Assessment Scope."
  B. "The OSC determines the CMMC Assessment Scope, and the C3PAO validates the CMMC Assessment Scope."
  C. "The CMMC Lead Assessor determines the CMMC Assessment Scope, and the OSC validates the CMMC Assessment Scope."
  D. "The CMMC C3PAO determines the CMMC Assessment Scope, and the Lead Assessor validates the CMMC Assessment Scope."
  B. "The OSC determines the CMMC Assessment Scope, and the C3PAO validates the CMMC Assessment Scope."

• Question 203:

  A Lead Assessor is performing a CMMC readiness review. The Lead Assessor has already recorded the assessment risk status and the overall assessment feasibility. At MINIMUM, what remaining readiness review criteria should be verified?

  A. Determine the practice pass/fail results.
  B. Determine the preliminary recommended findings.
  C. Determine the initial model practice ratings and record them.
  D. Determine the logistics. Assessment Team, and the evidence readiness.
  D. Determine the logistics. Assessment Team, and the evidence readiness.

• Question 204:

  A CCP is evaluating the adequacy and sufficiency of evidence for AC.L2-3.1.20: Verify and control/limit connections to and use of external systems. Which artifact BEST supports this practice?

  A. List of employee devices
  B. Network diagram showing isolated external connections
  C. Internal password rotation policy
  D. Organizational chart
  B. Network diagram showing isolated external connections

• Question 205:

  What is the primary intent of the verify evidence and record gaps activity?

  A. Map test and demonstration responses to CMMC practices.
  B. Conduct interviews to test process implementation knowledge.
  C. Determine the one-to-one relationship between a practice and an assessment object.
  D. Identify and describe differences between what the Assessment Team required and the evidence collected.
  D. Identify and describe differences between what the Assessment Team required and the evidence collected.

• Question 206:

  Which assessment method describes the process of reviewing, inspecting, observing, studying, or analyzing assessment objects (i.e., specification, mechanisms, activities)?

  A. Test
  B. Assess
  C. Examine
  D. Interview
  C. Examine

• Question 207:

  The Level 1 practice description in CMMC is Foundational. What is the Level 2 practice description?

  A. Expert
  B. Advanced
  C. Optimizing
  D. Continuously Improved
  B. Advanced

• Question 208:

  An assessor is collecting affirmations. So far, the assessor has collected interviews, demonstrations, emails, messaging, and presentations. Are these appropriate approaches to collecting affirmations?

  A. No, emails are not appropriate affirmations.
  B. No, messaging is not an appropriate affirmation.
  C. Yes, the affirmations collected by the assessor are all appropriate.
  D. Yes, the affirmations collected by the assessor are all appropriate, as are screenshots.
  C. Yes, the affirmations collected by the assessor are all appropriate.

• Question 209:

  When planning an assessment, the Lead Assessor should work with the OSC to select personnel to be interviewed who could:

  A. have a security clearance.
  B. be a senior person in the company.
  C. demonstrate expertise on the CMMC requirements.
  D. provide clarity and understanding of their practice activities.
  D. provide clarity and understanding of their practice activities.

• Question 210:

  A CCP observes that the OSC implements a quarterly control review, but the practice requires monthly review. Which determination is appropriate?

  A. MET because control reviews occur regularly
  B. MET if interviews confirm reviews occur as needed
  C. NOT MET because evidence does not meet required frequency
  D. NOT MET only if the OSC has no review process
  C. NOT MET because evidence does not meet required frequency