Question 1

Ethics is a shared responsibility between:

Options :

A : DoD and CMMC-AB.

B : OSC and sponsors.

C : CMMC-AB and members of the CMMC Ecosystem.

D : members of the CMMC Ecosystem and Lead Assessors.

Answer: C

Question 2

An OSC receives an email with "CUI//SP-PRVCY//FED Only" in the body of the message Which organization's website should the OSC go to identify what this marking means?

Options :

A : NARA

B : CMMC-AB

C : DoD Contractors FAQ page

D : DoD 239.7601 Definitions page

Answer: A

Question 3

The CMMC Level 2 assessment methods include examination and can include:

Options :

A : documents, mechanisms, or activities.

B : specific hardware, software, or firmware safeguards employed within a system.

C : policies, procedures, security plans, penetration tests, and security requirements.

D : observation of system backup operations, exercising a contingency plan, and monitoring network traffic.

Answer: C

Question 4

In preparation for a CMMC Level 1 Self-Assessment, the IT manager for a DIB organization is documenting asset types in the company's SSP The manager determines that identified machine controllers and assembly machines should be documented as Specialized Assets. Which type of Specialized Assets has the manager identified and documented?

Options :

A : loT

B : Restricted IS

C : Test equipment

D : Operational technology

Answer: D

Question 5

Within how many days from the Assessment Final Recommended Findings Brief should the Lead Assessor and Assessment Team Members, if necessary, review the accuracy and validity of (he OSC's updated POA&M with any accompanying evidence or scheduled collections?

Options :

A : 90 days

B : 180 days

C : 270 days

D : 360 days

Answer: B

Higher Test Marks with Free Online CMMC-CCP Exam Practice

Buying Options: