Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 211:

  A CMMC Assessment is being conducted at an OSC's HQ. which is a shared workspace in a multi-tenant building. The OSC is renting four offices on the first floor that can be locked individually. The first-floor conference room is shared with other tenants but has been reserved to conduct the assessment. The conference room has a desk with a drawer that does not lock. At the end of the day, an evidence file that had been sent by email is reviewed. What is the BEST way to handle this file?

  A. Review it. print it, and put it in the desk drawer.
  B. Review it, and make notes on the computer provided by the client.
  C. Review it, print it, make notes, and then shred it in cross-cut shredder in the print room.
  D. Review it. print it, and leave it in a folder on the table together with the other documents.
  C. Review it, print it, make notes, and then shred it in cross-cut shredder in the print room.

• Question 212:

  Before submitting the assessment package to the Lead Assessor for final review, a CCP decides to review the Media Protection (MP) Level 1 practice evidence to ensure that all media containing FCI are sanitized or destroyed before disposal or release for reuse. After a thorough review, the CCP tells the Lead Assessor that all supporting documents fully reflect the performance of the practice and should be accepted because the evidence is:

  A. official.
  B. adequate.
  C. compliant.
  D. subjective.
  B. adequate.

• Question 213:

  What is a PRIMARY activity that is performed while conducting an assessment?

  A. Develop assessment plan.
  B. Collect and examine evidence.
  C. Verify readiness to conduct assessment.
  D. Deliver recommended assessment results.
  B. Collect and examine evidence.

• Question 214:

  Which regulation allows for whistleblowers to sue on behalf of the federal government?

  A. NISTSP 800-53
  B. NISTSP 800-171
  C. False Claims Act
  D. Code of Professional Conduct
  C. False Claims Act

• Question 215:

  A company has a government services division and a commercial services division. The government services division interacts exclusively with federal clients and regularly receives FCI. The commercial services division interacts exclusively with non-federal clients and processes only publicly available information. For this company's CMMC Level 1 Self-Assessment, how should the assets supporting the commercial services division be categorized?

  A. FCI Assets
  B. Specialized Assets
  C. Out-of-Scope Assets
  D. Operational Technology Assets
  C. Out-of-Scope Assets

• Question 216:

  Who is responsible for ensuring that subcontractors have a valid CMMC Certification?

  A. CMMC-AB
  B. OUSDAandS
  C. DoD agency or client
  D. Contractor organization
  D. Contractor organization

• Question 217:

  For the purpose of determining scope, what needs to be included as part of the assessment but would NOT receive a CMMC certification unless an enterprise assessment is conducted?

  A. ESP
  B. People
  C. Test equipment
  D. Government property
  A. ESP

• Question 218:

  A cyber incident is discovered that affects a covered contractor IS and the CDI residing therein. How long does the contractor have to inform the DoD?

  A. 24 hours
  B. 48 hours
  C. 72 hours
  D. 96 hours
  C. 72 hours

• Question 219:

  Who is responsible for verifying that an OSC's asset inventory correctly identifies all CUI Assets and Security Protection Assets?

  A. CCP
  B. OSC
  C. C3PAO
  D. Lead Assessor
  D. Lead Assessor

• Question 220:

  What service is the MOST comprehensive that the RPO provides?

  A. Training services
  B. Education services
  C. Consulting services
  D. Assessment services
  C. Consulting services