CMMC-CCP Cyber-AB Exam Questions and Free Practice Test

Question 7

While conducting a CMMC Assessment, an individual from the OSC provides documentation to the assessor for review. The documentation states an incident response capability is established and contains information on incident preparation, detection, analysis, containment, recovery, and user response activities. Which CMMC practice is this documentation attesting to?

A. IR.L2-3.6.1: Incident Handling

B. IR.L2-3.6.2: Incident Reporting

C. IR.L2-3.6.3: Incident Response Testing

D. IR.L2-3.6.4: Incident Spillage

Correct Answer:A

Question 8

When planning an assessment, the Lead Assessor should work with the OSC to select personnel to be interviewed who could:

A. have a security clearance.

B. be a senior person in the company.

C. demonstrate expertise on the CMMC requirements.

D. provide clarity and understanding of their practice activities.

Correct Answer:D

Question 9

While conducting a CMMC Level 2 Assessment, the Lead Assessor determines that the OSC has badge readers, pin code pads, and keys for various access points as well as documentation to demonstrate meeting the practice. Which CMMC practice has the OSC MET?

A. PE.L1-3.10.5: Control and manage physical access devices

B. MP.L2-3.8.5: Mark media with necessary CUI markings and distribution limitations

C. SI.L2-3.14.3: Monitor system security alerts and advisories and take action in response

D. PS.L2-3.9.2: Ensure that organizational systems containing CUI are protected duringand after personnel actions such as terminations and transfers

Correct Answer:A

Question 10

Which principles are included in defining the CMMC-AB Code of Professional Conduct?

A. Objectivity, classification, and information accuracy

B. Objectivity, confidentiality, and information integrity

C. Responsibility, classification, and information accuracy

D. Responsibility, confidentiality, and information integrity

Correct Answer:D

Question 11

The director of sales, in a meeting, stated that the sales team received feedback on some emails that were sent, stating that the emails were not marked correctly. Which training should the director of sales refer the sales team to regarding information as to how to mark emails?

A. FBI CUI Introduction to Marking

B. NARA CUI Introduction to Marking

C. C3PAO CUI Introduction to Marking

D. CMMC-AB CUI Introduction to Marking

Correct Answer:B

Question 12

According to DFARS clause 252.204-7012, who is responsible for determining that Information in a given category should be considered CUI?

A. The NARA CUI Executive Agent

B. The contractor who generated the information

C. The DoD agency for whom the contractor is performing the work

D. The military personnel assigned to the contractor for that purpose

Correct Answer:C

START CMMC-CCP EXAM