Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 41:

  Which of the following practices belongs to the System and Communications Protection (SC) domain?

  A. SC.L2-3.13.5: Implement subnetworks for publicly accessible system components
  B. PE.L1-3.10.3: Escort visitors
  C. AC.L1-3.1.1: Limit system access to authorized users
  D. IA.L2-3.5.4: Employ replay-resistant authentication
  A. SC.L2-3.13.5: Implement subnetworks for publicly accessible system components

• Question 42:

  An employee is the primary system administrator for an OSC. The employee will be a core part of the assessment, as they perform most of the duties in managing and maintaining the systems. What would the employee be BEST categorized as?

  A. Analyzer
  B. Inspector
  C. Applicable staff
  D. Demonstration staff
  C. Applicable staff

• Question 43:

  The facilities manager for a company has procured a Wi-Fi enabled, mobile application-controlled thermostat for the server room, citing concerns over the inability to remotely gauge and control the temperature of the room. Because the thermostat is connected to the company's FCI network, should it be assessed as part of the CMMC Level 1 Self-Assessment Scope?

  A. No, because it is OT
  B. No, because it is an loT device
  C. Yes. because it is a restricted IS
  D. Yes, because it is government property
  C. Yes. because it is a restricted IS

• Question 44:

  Which domain has a practice requiring an organization to restrict, disable, or prevent the use of nonessential programs?

  A. Access Control (AC)
  B. Media Protection (MP)
  C. Asset Management (AM)
  D. Configuration Management (CM)
  D. Configuration Management (CM)

• Question 45:

  An OSC stores backed-up CUI on an encrypted removable drive kept in a locked cabinet. What function is the removable drive performing?

  A. Processing CUI
  B. Transmitting CUI
  C. Storing CUI
  D. Disposing of CUI
  C. Storing CUI

• Question 46:

  In the Code of Professional Conduct, what does the practice of Professionalism require?

  A. Do not copy materials without permission to do so.
  B. Do not make assertions about assessment outcomes.
  C. Refrain from dishonesty in all dealings regarding CMMC.
  D. Ensure the security of all information discovered or received.
  C. Refrain from dishonesty in all dealings regarding CMMC.

• Question 47:

  Plan of Action defines the clear goal or objective for the plan. What information is generally NOT a part of a plan of action?

  A. Completion dates
  B. Milestones to measure progress
  C. Ownership of who is accountable for ensuring plan performance
  D. Budget requirements to implement the plan's remediation actions
  D. Budget requirements to implement the plan's remediation actions

• Question 48:

  Which document specifies the CMMC Level 1 practices that correspond to basic safeguarding requirements?

  A. NIST SP 800-171
  B. NIST SP 800-171b
  C. 48 CFR 52.204-21
  D. DFARS 252.204-7012
  C. 48 CFR 52.204-21

• Question 49:

  Which document is the BEST source for descriptions of each practice or process contained within the various CMMC domains?

  A. CMMC Glossary
  B. CMMC Appendices
  C. CMMC Assessment Process
  D. CMMC Assessment Guide Levels 1 and 2
  D. CMMC Assessment Guide Levels 1 and 2

• Question 50:

  Who is responsible for identifying and verifying Assessment Team Member qualifications?

  A. C3PAO
  B. CMMC-AB
  C. Lead Assessor
  D. CMMC Marketplace
  C. Lead Assessor