Online Access Free CMMC-CCP Exam Questions

A Level 2 Assessment was conducted for an OSC, and the results are ready to be submitted. Prior to uploading the assessment results, what step MUST the C3PAO complete?

• A.Notify the CMMC-AB that submission is forthcoming.
• B.Pay an assessment submission fee.
• C.Complete an internal review of the results.
• D.Coordinate a final briefing between the Lead Assessor and the OSC.

During assessment planning, the OSC recommends a person to interview for a certain practice. The person being interviewed MUST be the person who:

• A.implements, performs, or supports that practice.
• B.supports, audits, and performs that practice.
• C.audits that practice.
• D.funds that practice.

When assessing SI.L2-3.14.6: Monitor communications for attack, the CCA interviews the person responsible for the intrusion detection system and examines relevant policies and procedures for monitoring organizational systems. What would be a possible next step the CCA could conduct to gather sufficient evidence?

• A.Review an artifact to check key references for the configuration of the IDS or IPS practice for additional guidance on intrusion detection and prevention systems.
• B.Conduct a penetration test
• C.Interview the intrusion detection system ' s supplier.
• D.Upload known malicious code and observe the system response.

Which statement BEST describes the requirements for a C3PA0?

• A.A C3PAO must be authorized by CMMC-AB before being able to conduct assessments.
• B.An accredited C3PAO must meet all DoD and some ISO/IEC 17020 requirements.
• C.An authorized C3PAO must meet some DoD and all ISO/IEC 17020 requirements.
• D.AC3PAO must be accredited by DoD before being able to conduct assessments.

What is a PRIMARY activity that is performed while conducting an assessment?

• A.Verify readiness to conduct assessment.
• B.Develop assessment plan.
• C.Collect and examine evidence.
• D.Deliver recommended assessment results.