CMMC-CCP Cyber-AB Exam Questions and Free Practice Test

Question 49

Before submitting the assessment package to the Lead Assessor for final review, a CCP decides to review the Media Protection (MP) Level 1 practice evidence to ensure that all media containing FCI are sanitized or destroyed before disposal or release for reuse. After a thorough review, the CCP tells the Lead Assessor that all supporting documents fully reflect the performance of the practice and should be accepted because the evidence is:

A. official.

B. adequate.

C. compliant.

D. subjective.

Correct Answer:B

Question 50

Which phase of the CMMC Assessment Process includes the task to identify, obtain inventory, and verify evidence?

A. Phase 1: Plan and Prepare Assessment

B. Phase 2: Conduct Assessment

C. Phase 3: Report Recommended Assessment Results

D. Phase 4: Remediation of Outstanding Assessment Issues

Correct Answer:B

Question 51

Prior to initiating an OSC's CMMC Assessment, the Lead Assessor briefed the team on the most important requirements of the assessment. The assessor also insisted that the same results of the findings summary, practice ratings, and Level recommendations must be submitted to the C3PAO for initial processes and review. After several weeks of assessment, the C3PAO completes the internal review, the recommended results are then submitted through the C3PAO for final quality review and rating approval. Which document stipulates these reporting requirements?

A. CMMC Assessment reporting requirements

B. DFARS 52.204-21 assessment reporting requirements

C. NISTSP 800-171 Revision 2 assessment reporting requirements

D. DFARS clause 252.204-7012 assessment reporting requirements

Correct Answer:A

Question 52

An assessor needs to get the most accurate answers from an OSC's team members. What is the BEST method to ensure that the OSC's team members are able to describe team member responsibilities?

A. Interview groups of people to get collective answers.

B. Understand that testing is more important that interviews.

C. Ensure confidentiality and non-attribution of team members.

D. Let team members know the questions prior to the assessment.

Correct Answer:C

Question 53

Which statement is NOT a measure to determine if collected evidence is sufficient?

A. Evidence covers the sampled organization

B. Evidence is not required if the practice is ISO certified

C. Evidence covers the model scope of the Assessment (Target CMMC Level)

D. Evidence corresponds to the sampled organization in the evidence collection approach

Correct Answer:B

Question 54

How does the CMMC define a practice?

A. A business transaction

B. A condition arrived at by experience or exercise

C. A series of changes taking place in a defined manner

D. An activity or activities performed to meet defined CMMC objectives

Correct Answer:D

START CMMC-CCP EXAM