CMMC-CCP 試験問題を無料オンラインアクセス

In the CMMC Model, how many practices are included in Level 1?

• A.15 practices
• B.110 practices
• C.17 practices
• D.72 practices

An Assessment Team is conducting interviews with team members about their roles and responsibilities. The team member responsible for maintaining the antivirus program knows that it was deployed but has very little knowledge on how it works. Is this adequate for the practice?

• A.No, the team member ' s interview answers about deployment and maintenance are insufficient.
• B.Yes, antivirus programs are automated to run independently.
• C.No, the team member must know how the antivirus program is deployed and maintained.
• D.Yes, the antivirus program is available, so it is sufficient.

A server is used to store FCI with a cloud provider long-term. What is the server considered?

• A.In scope, because the cloud provider is required to be CMMC Level 2 certified
• B.In scope, because the cloud provider will be storing the FCI data
• C.Out of scope, because encryption is always used when the cloud provider stores the FCI data
• D.Out of scope, because the cloud provider stores the FCI data long-term

An assessor needs to get the most accurate answers from an OSC ' s team members. What is the BEST method to ensure that the OSC ' s team members are able to describe team member responsibilities?

• A.Interview groups of people to get collective answers.
• B.Let team members know the questions prior to the assessment.
• C.Understand that testing is more important that interviews.
• D.Ensure confidentiality and non-attribution of team members.

Which term describes " the protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to. or modification of information " ?

• A.Adequate security
• B.Advanced security
• C.Adopted security
• D.Adaptive security