Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 71:

  Which assessment activity BEST aligns with determining whether personnel properly follow documented procedures?

  A. Examine
  B. Interview
  C. Test
  D. Compile
  C. Test

• Question 72:

  The practices in CMMC Level 2 consist of the security requirements specified in:

  A. NIST SP 800-53
  B. NIST SP 800-171
  C. 48 CFR 52.204-21
  D. DFARS 252.204-7012
  B. NIST SP 800-171

• Question 73:

  A Lead Assessor is preparing to conduct a Readiness Review during Phase 1 of the Assessment Process. How much evidence MUST be gathered for each practice?

  A. A sufficient amount
  B. At least 2 Assessment Objects
  C. Evidence that is deemed adequate
  D. Evidence to support at least 2 Assessment Methods
  A. A sufficient amount

• Question 74:

  Exercising due care to ensure the information gathered during the assessment is protected even after the engagement has ended meets which code of conduct requirement?

  A. Availability
  B. Confidentiality
  C. Information Integrity
  D. Respect for Intellectual Property
  B. Confidentiality

• Question 75:

  Evidence gathered from an OSC is being reviewed. Based on the assessment and organizational scope, the Lead Assessor requests the Assessment Team to verify that the coverage by domain, practice. Host Unit. Supporting Organization/Unit, and enclaves are comprehensive enough to rate against each practice. Which criteria is the assessor referring to?

  A. Adequacy
  B. Capability
  C. Sufficiency
  D. Objectivity
  A. Adequacy

• Question 76:

  A Lead Assessor is presenting an assessment kickoff and opening briefing. What topic MUST be included?

  A. Gathering evidence
  B. Review of the OSC's SSP
  C. Overview of the assessment process
  D. Examination of the artifacts for sufficiency
  C. Overview of the assessment process

• Question 77:

  A CCP reviewing the AU (Audit and Accountability) domain requests system logs. The OSC provides logs, but they contain no timestamps. What determination should be made?

  A. Evidence is adequate because logs exist
  B. Evidence is inadequate because timestamps are required to trace events
  C. Evidence is sufficient if logs cover at least 30 days
  D. Evidence is sufficient if policy references timestamps
  B. Evidence is inadequate because timestamps are required to trace events

• Question 78:

  Contractor scoping requirements for a CMMC Level 2 Assessment to document the asset in an inventory, in the SSP and on the network diagram apply to:

  A. GUI Assets.
  B. CUI and Security Protection Asset categories.
  C. all asset categories except for the Out-of-scope Assets.
  D. Contractor Risk Managed Assets and Specialized Assets.
  B. CUI and Security Protection Asset categories.

• Question 79:

  Two assessors cannot agree if a certain practice should be rated as MET or NOT MET. Who should they consult to determine the final interpretation?

  A. C3PAO
  B. CMMC-AB
  C. Lead Assessor
  D. Quality Assurance Assessor
  C. Lead Assessor

• Question 80:

  What is DFARS clause 252.204-7012 required for?

  A. All DoD solicitations and contracts
  B. Solicitations and contracts that use FAR part 12 procedures
  C. Procurements solely for the acquisition of commercial off-the-shelf
  D. Commercial off-the-shelf sold in the marketplace without modifications
  A. All DoD solicitations and contracts