Question 1

In scoping a CMMC Level 1 Self-Assessment, all of the computers and digital assets that handle FCI are identified. A file cabinet that contains paper FCI is also identified. What can this file cabinet BEST be determined to be?

Options :

A : In scope, because it is an asset that stores FCI

B : In scope, because it is part of the same physical location

C : Out of scope, because they are all only paper documents

D : Out of scope, because it does not process or transmit FCI

Answer: A

Question 2

Ethics is a shared responsibility between:

Options :

A : DoD and CMMC-AB.

B : OSC and sponsors.

C : CMMC-AB and members of the CMMC Ecosystem.

D : members of the CMMC Ecosystem and Lead Assessors.

Answer: C

Question 3

When scoping the organizational system, the scope of applicability for the cybersecurity CUI practices applies to the components of:

Options :

A : federal systems that process, store, or transmit CUI.

B : nonfederal systems that process, store, or transmit CUI.

C :

federal systems that process, store, or transmit CUI. or that provide protection for the system components.

D :

nonfederal systems that process, store, or transmit CUI. or that provide protection for the system components.

Answer: B

Question 4

A CMMC Assessment is being conducted at an OSC's HQ. which is a shared workspace in a multi-tenant building. The OSC is renting four offices on the first floor that can be locked individually. The first-floor conference room is shared with other tenants but has been reserved to conduct the assessment. The conference room has a desk with a drawer that does not lock. At the end of the day, an evidence file that had been sent by email is reviewed. What is the BEST way to handle this file?

Options :

A : Review it. print it, and put it in the desk drawer.

B : Review it, and make notes on the computer provided by the client.

C : Review it, print it, make notes, and then shred it in cross-cut shredder in the print room.

D : Review it. print it, and leave it in a folder on the table together with the other documents.

Answer: C

Question 5

An OSC has requested a C3PAO to conduct a Level 2 Assessment. The C3PAO has agreed, and the two organizations have collaborated to develop the Assessment Plan. Who agrees to and signs off on the Assessment Plan?

Options :

A : OSC and Sponsor

B : OSC and CMMC-AB

C : Lead Assessor and C3PAO

D : C3PAO and Assessment Official

Answer: C

Higher Test Marks with Free Online CMMC-CCP Exam Practice

Buying Options: