Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 51:

  Prior to initiating an OSC's CMMC Assessment, the Lead Assessor briefed the team on the most important requirements of the assessment. The assessor also insisted that the same results of the findings summary, practice ratings, and Level recommendations must be submitted to the C3PAO for initial processes and review. After several weeks of assessment, the C3PAO completes the internal review, the recommended results are then submitted through the C3PAO for final quality review and rating approval. Which document stipulates these reporting requirements?

  A. CMMC Assessment reporting requirements
  B. DFARS 52.204-21 assessment reporting requirements
  C. NISTSP 800-171 Revision 2 assessment reporting requirements
  D. DFARS clause 252.204-7012 assessment reporting requirements
  A. CMMC Assessment reporting requirements

• Question 52:

  The director of sales, in a meeting, stated that the sales team received feedback on some emails that were sent, stating that the emails were not marked correctly. Which training should the director of sales refer the sales team to regarding information as to how to mark emails?

  A. FBI CUI Introduction to Marking
  B. NARA CUI Introduction to Marking
  C. C3PAO CUI Introduction to Marking
  D. CMMC-AB CUI Introduction to Marking
  B. NARA CUI Introduction to Marking

• Question 53:

  Which assessment method compares actual-specified conditions with expected behavior?

  A. Test
  B. Examine
  C. Compile
  D. Interview
  A. Test

• Question 54:

  An OSC stores CUI in a database hosted on a FedRAMP-moderate cloud provider. Which activity performed by the cloud provider qualifies as processing CUI?

  A. Encrypting stored data
  B. Maintaining physical server rooms
  C. Running SQL queries on the OSC's database
  D. Providing vulnerability scan reports
  C. Running SQL queries on the OSC's database

• Question 55:

  Which words summarize categories of data disposal described in the NIST SP 800-88 Revision 1, Guidelines for Media Sanitation?

  A. Clear, purge, destroy
  B. Clear, redact, destroy
  C. Clear, overwrite, purge
  D. Clear, overwrite, destroy
  A. Clear, purge, destroy

• Question 56:

  Which organization is the governmental authority responsible for identifying and marking CUI?

  A. NARA
  B. NIST
  C. CMMC-AB
  D. Department of Homeland Security
  A. NARA

• Question 57:

  A CCP reviewing the OSC's IR (Incident Response) documentation finds an incident response plan but no evidence of testing or exercises. Which practice is most directly impacted?

  A. IR.L2-3.6.1: Incident Handling
  B. IR.L2-3.6.2: Incident Reporting
  C. IR.L2-3.6.3: Incident Response Testing
  D. IR.L2-3.6.4: Incident Spillage
  C. IR.L2-3.6.3: Incident Response Testing

• Question 58:

  Which example represents a Specialized Asset?

  A. SOCs
  B. Hosted VPN services
  C. Consultants who provide cybersecurity services
  D. All property owned or leased by the government
  D. All property owned or leased by the government

• Question 59:

  During assessment planning, the OSC recommends a person to interview for a certain practice. The person being interviewed MUST be the person who:

  A. funds that practice.
  B. audits that practice.
  C. supports, audits, and performs that practice.
  D. implements, performs, or supports that practice.
  D. implements, performs, or supports that practice.

• Question 60:

  An assessment procedure consists of an assessment objective, potential assessment methods, and assessment objects. Which statement is part of an assessment objective?

  A. Specifications and mechanisms
  B. Examination, interviews, and testing
  C. Determination statement related to the practice
  D. Exercising assessment objects under specified conditions
  C. Determination statement related to the practice