Cyber AB CMMC-CCP Online Practice Questions and Exam Preparation

Cyber AB CMMC-CCP Online Questions & Answers

• Question 81:

  Which term describes "the protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to. or modification of information"?

  A. Adopted security
  B. Adaptive security
  C. Adequate security
  D. Advanced security
  C. Adequate security

• Question 82:

  Which assessment method MOST directly confirms whether a technical control is functioning as intended in a production environment?

  A. Examine
  B. Interview
  C. Test
  D. Affirmation
  C. Test

• Question 83:

  Which principles are included in defining the CMMC-AB Code of Professional Conduct?

  A. Objectivity, classification, and information accuracy
  B. Objectivity, confidentiality, and information integrity
  C. Responsibility, classification, and information accuracy
  D. Responsibility, confidentiality, and information integrity
  B. Objectivity, confidentiality, and information integrity

• Question 84:

  What type of criteria is used to answer the question "Does the Assessment Team have the right evidence?"

  A. Adequacy criteria
  B. Objectivity criteria
  C. Sufficiency criteria
  D. Subjectivity criteria
  A. Adequacy criteria

• Question 85:

  What type of information is NOT intended for public release and is provided by or generated for the government under a contract to develop or deliver a product or service to the government, but not including information provided by the government to the public (such as on public websites) or simple transactional information, such as necessary to process payments?

  A. CDI
  B. CTI
  C. CUI
  D. FCI
  D. FCI

• Question 86:

  Within the CMMC Ecosystem which organization ultimately will manage and oversee the training, testing, authorization, and certification of candidate assessors and instructors?

  A. DoD OUSD
  B. DIB Collaborative Information Sharing Environment
  C. Committee on National Security Systems Instructions
  D. CMMC Assessors and Instructors Certification Organization
  D. CMMC Assessors and Instructors Certification Organization

• Question 87:

  A CCP is reviewing AC.L1-3.1.2: Limit information system access to the types of transactions and functions that authorized users are permitted to execute. Which artifact BEST supports this practice?

  A. System hardening guide
  B. Access control lists mapped to roles
  C. Security awareness training records
  D. Change management policy
  B. Access control lists mapped to roles

• Question 88:

  Which statement BEST describes an assessor's evidence gathering activities?

  A. Use interviews for assessing a Level 2 practice.
  B. Test all practices or objectives for a Level 2 practice
  C. Test certain assessment objectives to determine findings.
  D. Use examinations, interviews, and tests to gather sufficient evidence.
  D. Use examinations, interviews, and tests to gather sufficient evidence.

• Question 89:

  During the assessment process, who is the final interpretation authority for recommended findings?

  A. C3PAO
  B. CMMC-AB
  C. OSC sponsor
  D. Assessment Team Members
  B. CMMC-AB

• Question 90:

  An Assessment Team Member is conducting a CMMC Level 2 Assessment for an OSC that is in the process of inspecting Assessment Objects for AC.L1-3.1.1: Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems) to determine the adequacy of evidence provided by the OSC. Which Assessment Method does this activity fall under?

  A. Test
  B. Observe
  C. Examine
  D. Interview
  C. Examine