Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 241:

  An assessor requests vulnerability scan results. The OSC provides a scan report showing critical vulnerabilities marked as "accepted risk," but no documentation supporting the acceptance decision. What is the BEST action?

  A. Accept the risk decision as sufficient
  B. Determine the practice MET because risks are documented
  C. Request supporting approval records
  D. Score the practice NOT MET immediately
  C. Request supporting approval records

• Question 242:

  During an assessment, which phase of the process identifies conflicts of interest?

  A. Analyze requirements.
  B. Develop assessment plan.
  C. Verify readiness to conduct assessment.
  D. Generate final recommended assessment results.
  C. Verify readiness to conduct assessment.

• Question 243:

  Which government agency are DoD contractors required to report breaches of CUI to?

  A. FBI
  B. NARA
  C. DoD Cyber Crime Center
  D. Under Secretary of Defense for Intelligence and Security
  C. DoD Cyber Crime Center

• Question 244:

  When assessing SI.L2-3.14.6: Monitor communications for attack, the CCA interviews the person responsible for the intrusion detection system and examines relevant policies and procedures for monitoring organizational systems. What would be a possible next step the CCA could conduct to gather sufficient evidence?

  A. Conduct a penetration test
  B. Interview the intrusion detection system's supplier.
  C. Upload known malicious code and observe the system response.
  D. Review an artifact to check key references for the configuration of the IDS or IPS practice for additional guidance on intrusion detection and prevention systems.
  D. Review an artifact to check key references for the configuration of the IDS or IPS practice for additional guidance on intrusion detection and prevention systems.

• Question 245:

  An organization that manufactures night vision cameras is looking for help to address the gaps identified in physical access control systems. Which certified individual should they approach for implementation support?

  A. CCA of the C3PAO performing the assessment
  B. RP of an organization not part of the assessment
  C. Practitioner of the organization performing the assessment LTP
  D. DoD Contract Official of the organization performing the assessment
  B. RP of an organization not part of the assessment

• Question 246:

  An OSC needs to be assessed on RA.L2-3.11.1: Periodically assess the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, and individuals, resulting from the operation of organizational systems and the associated processing, storage, or transmission of CUI. What is in scope for a Level 2 assessment of RA.L2-3.11.1?

  A. IT systems
  B. Enterprise systems
  C. CUI Marking processes
  D. Processes, people, physical entities, and IT systems in which CUI processed, stored, or transmitted
  D. Processes, people, physical entities, and IT systems in which CUI processed, stored, or transmitted