CMMC-CCP 試験問題を無料オンラインアクセス

A contractor provides services and data to the DoD. The transactions that occur to handle FCI take place over the contractor's business network, but the work is performed on contractor-owned systems, which must be configured based on government requirements and are used to support a contract. What type of Specialized Asset are these systems?

• A.Government property
• B.Test equipment
• C.Restricted IS
• D.loT

When executing a remediation review, the Lead Assessor should:

• A.help OSC to complete planned remediation activities.
• B.submit a delta assessment remediation package for C3PAO's internal quality review.
• C.validate that practices previously listed on the POA&M have been removed on an updated Risk Assessment.
• D.plan two consecutive remediation reviews for an OSC.

Which domain references the requirements needed to handle physical or digital assets containing CUI?

• A.Physical Protection (PE)
• B.Media Protection (MP)
• C.System and Communications Protection (SC)
• D.System and Information Integrity (SI)

An assessor has been working with an OSC's point of contact to plan and prepare for their upcoming assessment. What is one of the MOST important things to remember when analyzing requirements for an assessment?

• A.The initial plan cannot be changed once agreed upon.
• B.Assessors need to continuously review and update the requirements and plan for the assessment as information is gathered.
• C.There is a determined amount of time that the OSC's point of contact has to submit evidence and rough order-of-magnitude.
• D.Scoping an assessment is easy and worry-free.

Who is responsible for identifying and verifying Assessment Team Member qualifications?

• A.CMMC-AB
• B.C3PAO
• C.CMMC Marketplace
• D.Lead Assessor