Free CyberAB CMMC-CCP Exam Questions

While determining the scope for a company's CMMC Level 1 Self-Assessment, the contract administrator includes the hosting providers that manage their IT infrastructure. Which asset type BEST describes the third-party organization?

A. ESPs

B. People

C. Facilities

D. Technology

When scoping the organizational system, the scope of applicability for the cybersecurity CUI practices applies to the components of:

A. federal systems that process, store, or transmit CUI.

B. nonfederal systems that process, store, or transmit CUI.

C. federal systems that process, store, or transmit CUI. or that provide protection for the system components.

D. nonfederal systems that process, store, or transmit CUI. or that provide protection for the system components.

During the planning phase of the Assessment Process. C3PAO staff are reviewing the various entities associated with an OSC that has requested a CMMC Level 2 Assessment. Which term describes the people, processes, and technology external to the HQ Organization that participate in the assessment but will not receive a CMMC Level unless an enterprise Assessment is conducted?

A. Host Unit

B. Organization

C. Coordinating Unit

D. Supporting Organization/Unit

What is DFARS clause 252.204-7012 required for?

A. All DoD solicitations and contracts

B. Solicitations and contracts that use FAR part 12 procedures

C. Procurements solely for the acquisition of commercial off-the-shelf

D. Commercial off-the-shelf sold in the marketplace without modifications

Which example represents a Specialized Asset?

A. SOCs

B. Hosted VPN services

C. Consultants who provide cybersecurity services

D. All property owned or leased by the government

How does the CMMC define a practice?

A. A business transaction

B. A condition arrived at by experience or exercise

C. A series of changes taking place in a defined manner

D. An activity or activities performed to meet defined CMMC objectives

What is the primary intent of the verify evidence and record gaps activity?

A. Map test and demonstration responses to CMMC practices.

B. Conduct interviews to test process implementation knowledge.

C. Determine the one-to-one relationship between a practice and an assessment object.

D. Identify and describe differences between what the Assessment Team required and the evidence collected.

An employee is the primary system administrator for an OSC. The employee will be a core part of the assessment, as they perform most of the duties in managing and maintaining the systems. What would the employee be BEST categorized as?

A. Analyzer

B. Inspector

C. Applicable staff

D. Demonstration staff

When planning an assessment, the Lead Assessor should work with the OSC to select personnel to be interviewed who could:

A. have a security clearance.

B. be a senior person in the company.

C. demonstrate expertise on the CMMC requirements.

D. provide clarity and understanding of their practice activities.

As defined in the CMMC-AB Code of Professional Conduct, what term describes any contract between two legal entities?

A. Union

B. Accord

C. Alliance

D. Agreement