Free CyberAB CMMC-CCP Exam Questions

When an OSC requests an assessment by a C3PAO, who selects the Lead Assessor for the assessment?

A. OSC

B. C3PAO

C. C3PAO and OSC

D. OSC and Lead Assessor

An assessor is in Phase 3 of the CMMC Assessment Process. The assessor has delivered the final findings, submitted the assessment results package, and provided feedback to the C3PAO and CMMC-AB. What must the assessor still do?

A. Determine level recommendation

B. Archive all assessment artifacts

C. Determine final practice pass/fail results .

D. Archive or dispose of any assessment artifacts

A Lead Assessor has been assigned to a CMMC Assessment During the assessment, one of the assessors approaches with a signed policy. There is one signatory, and that person has since left the company. Subsequently, another person was hired into that position but has not signed the document. Is this document valid?

A. The signatory is the authority to implement and enforce the policy, and since that person is no longer with the company, the policy is not valid.

B. More research on the company policy of creating, implementing, and enforcing policies is needed. If the company has a policy identifying the authority as with the position or person, then the policy is valid.

C. The signatory does not validate or invalidate the policy. For the purpose of this assessment, ensuring that the policy is current and is being implemented by the individuals who are performing the work is sufficient.

D. The authority to implement and enforce lies with the position, not the person. As long as that position's authority and responsibilities have not been removed from implementing that domain, it is still a valid policy.

In many organizations, the protection of FCI includes devices that are used to scan physical documentation into digital form and print physical copies of digital FCI. What technical control can be used to limit multi-function device (MFD) access to only the systems authorized to access the MFD?

A. Virtual LAN restrictions

B. Single administrative account

C. Documentation showing MFD configuration

D. Access lists only known to the IT administrator

Who is responsible for ensuring that subcontractors have a valid CMMC Certification?

A. CMMC-AB

B. OUSD A&S

C. DoD agency or client

D. Contractor organization

CMMC scoping covers the CUI environment encompassing the systems, applications, and services that focus on where CUI is:

A. received and transferred.

B. stored, processed, and transmitted.

C. entered, edited, manipulated, printed, and viewed.

D. located on electronic media, on system component memory, and on paper.

The Assessment Team has completed the assessment and determined the preliminary practice ratings. The preliminary practice ratings must be shared with the OSC prior to being finalized for submission. Based on this information, the assessor should present the preliminary practice ratings:

A. During the final Daily Checkpoint

B. After discussing with the CMMC-AB

C. Via email after the final Daily Checkpoint

D. Over the phone after the final Daily Checkpoint

When are contractors required to achieve a CMMC certificate at the Level specified in the solicitation?

A. At the time of award

B. Upon solicitation submission

C. Thirty days from the award date

D. Before the due date of submission

A CCP is part of a CMMC Assessment Team interviewing a subject-matter expert on Access Control (AC) within an OSC. During the interview process, what will the CCP ensure about the information exchanged during the interview?

A. Performed in groups for more efficient use of resources

B. Recorded for inclusion in the Final Recommended Findings report

C. Confidential and non-attributable so interviewees can speak without fear of reprisal

D. Mapped to specific CMMC practices to clearly delineate which practice is being evaluated

A C3PAO is conducting High Level Scoping for an OSC that requested an assessment Which term describes the people, processes, and technology that will be applied to the contract who are requesting a CMMC Level assessment?

A. Host Unit

B. Branch Office

C. Coordinating Unit

D. Supporting Organization/Units