Question 1

When assessing an OSC for CMMC: the Lead Assessor should use the information from the Discussion and Further Discussion sections in each practice because it:

Options :

A : is normative for an OSC to follow.

B : contains examples that an OSC must implement.

C : is mandatory and aligns with FAR Clause 52.204-21.

D : provides additional information to facilitate the assessment of the practice.

Answer: D

Question 2

Which authority leads the CMMC direction, standards, best practices, and knowledge framework for how to map the controls and processes across different Levels that range from basic cyber hygiene to advanced cyber practices?

Options :

A : NIST

B : DoD CIO office

C : Federal CIO office

D : Defense Federal Acquisition Regulation Council

Answer: B

Question 3

In preparation for a CMMC Level 1 Self-Assessment, the IT manager for a DIB organization is documenting asset types in the company's SSP The manager determines that identified machine controllers and assembly machines should be documented as Specialized Assets. Which type of Specialized Assets has the manager identified and documented?

Options :

A : loT

B : Restricted IS

C : Test equipment

D : Operational technology

Answer: D

Question 4

How does the CMMC define a practice?

Options :

A : A business transaction

B : A condition arrived at by experience or exercise

C : A series of changes taking place in a defined manner

D : An activity or activities performed to meet defined CMMC objectives

Answer: D

Question 5

Which domain has a practice requiring an organization to restrict, disable, or prevent the use of nonessential programs?

Options :

A : Access Control (AC)

B : Media Protection (MP)

C : Asset Management (AM)

D : Configuration Management (CM)

Answer: D

Free CMMC-CCP Mock Exam – Practice Online Confidently

Buying Options: