Question 1

A C3PAO is conducting High Level Scoping for an OSC that requested an assessment Which term describes the people, processes, and technology that will be applied to the contract who are requesting a CMMC Level assessment?

Options :

A : Host Unit

B : Branch Office

C : Coordinating Unit

D : Supporting Organization/Units

Answer: D

Question 2

The CMMC Level 2 assessment methods include examination and can include:

Options :

A : documents, mechanisms, or activities.

B : specific hardware, software, or firmware safeguards employed within a system.

C : policies, procedures, security plans, penetration tests, and security requirements.

D : observation of system backup operations, exercising a contingency plan, and monitoring network traffic.

Answer: C

Question 3

When scoping the organizational system, the scope of applicability for the cybersecurity CUI practices applies to the components of:

Options :

A : federal systems that process, store, or transmit CUI.

B : nonfederal systems that process, store, or transmit CUI.

C :

federal systems that process, store, or transmit CUI. or that provide protection for the system components.

D :

nonfederal systems that process, store, or transmit CUI. or that provide protection for the system components.

Answer: B

Question 4

In scoping a CMMC Level 1 Self-Assessment, all of the computers and digital assets that handle FCI are identified. A file cabinet that contains paper FCI is also identified. What can this file cabinet BEST be determined to be?

Options :

A : In scope, because it is an asset that stores FCI

B : In scope, because it is part of the same physical location

C : Out of scope, because they are all only paper documents

D : Out of scope, because it does not process or transmit FCI

Answer: A

Question 5

When assessing an OSC for CMMC: the Lead Assessor should use the information from the Discussion and Further Discussion sections in each practice because it:

Options :

A : is normative for an OSC to follow.

B : contains examples that an OSC must implement.

C : is mandatory and aligns with FAR Clause 52.204-21.

D : provides additional information to facilitate the assessment of the practice.

Answer: D

Confidently Practice Online with Free CMMC-CCP Exam Cram

Buying Options: