Question 1

In preparation for a CMMC Level 1 Self-Assessment, the IT manager for a DIB organization is documenting asset types in the company's SSP The manager determines that identified machine controllers and assembly machines should be documented as Specialized Assets. Which type of Specialized Assets has the manager identified and documented?

Options :

A : loT

B : Restricted IS

C : Test equipment

D : Operational technology

Answer: D

Question 2

In scoping a CMMC Level 1 Self-Assessment, all of the computers and digital assets that handle FCI are identified. A file cabinet that contains paper FCI is also identified. What can this file cabinet BEST be determined to be?

Options :

A : In scope, because it is an asset that stores FCI

B : In scope, because it is part of the same physical location

C : Out of scope, because they are all only paper documents

D : Out of scope, because it does not process or transmit FCI

Answer: A

Question 3

The CMMC Level 2 assessment methods include examination and can include:

Options :

A : documents, mechanisms, or activities.

B : specific hardware, software, or firmware safeguards employed within a system.

C : policies, procedures, security plans, penetration tests, and security requirements.

D : observation of system backup operations, exercising a contingency plan, and monitoring network traffic.

Answer: C

Question 4

An OSC receives an email with "CUI//SP-PRVCY//FED Only" in the body of the message Which organization's website should the OSC go to identify what this marking means?

Options :

A : NARA

B : CMMC-AB

C : DoD Contractors FAQ page

D : DoD 239.7601 Definitions page

Answer: A

Question 5

When scoping the organizational system, the scope of applicability for the cybersecurity CUI practices applies to the components of:

Options :

A : federal systems that process, store, or transmit CUI.

B : nonfederal systems that process, store, or transmit CUI.

C :

federal systems that process, store, or transmit CUI. or that provide protection for the system components.

D :

nonfederal systems that process, store, or transmit CUI. or that provide protection for the system components.

Answer: B

Confidently Practice Online with Free CMMC-CCP Exam Cram

Buying Options: