Cyber AB CMMC-CCP Questions Answers

Page: 5 / 12

Question 20

What is the MOST common purpose of assessment procedures?

Options:

Obtain evidence.

Define level of effort.

Determine information flow.

Determine value of hardware and software.

Question 21

Which domains are a part of a Level 1 Self-Assessment?

Options:

Access Control (AC), Risk Management

Risk Management (RM). Access Control (AC), and Physical Protection (PE)

Access Control (AC), Physical Protection (PE), and Identification and Authentication (IA)

Risk Management (RM). Media Protection (MP), and Identification and Authentication (IA)

Question 22

A company has a government services division and a commercial services division. The government services division interacts exclusively with federal clients and regularly receives FCI. The commercial services division interacts exclusively with non-federal clients and processes only publicly available information. For this company's CMMC Level 1 Self-Assessment, how should the assets supporting the commercial services division be categorized?

Options:

FCI Assets

Specialized Assets

Out-of-Scope Assets

Operational Technology Assets

Question 23

A CCP is part of a CMMC Assessment Team interviewing a subject-matter expert on Access Control (AC) within an OSC. During the interview process, what will the CCP ensure about the information exchanged during the interview?