CMMC-CCP Free Practice Test

A CMMC Level 1 Self-Assessment identified an asset in the OSC's facility that does not process, store, or transmit FCI. Which type of asset is this considered?

1. A. FCI Assets
2. B. Specialized Assets
3. C. Out-of-Scope Assets
4. D. Government-Issued Assets

Correct Answer: C

For a CMMC Level 2 certification, which organization maintains a non-disclosure agreement with the OSC?

1. A. NIST
2. B. C3PAO
3. C. CMMC-AB
4. D. OUSD A&S

Correct Answer: B

For the purpose of determining scope, what needs to be included as part of the assessment but would NOT receive a CMMC certification unless an enterprise assessment is conducted?

1. A. ESP
2. B. People
3. C. Test equipment
4. D. Government property

Correct Answer: A

In performing scoping, what should the assessor ensure that the scope of the assessment covers?

1. A. All assets documented in the business plan
2. B. All assets regardless if they do or do not process, store, or transmit FCI/CUI
3. C. All entities, regardless of the line of business, associated with the organization
4. D. All assets processing, storing, or transmitting FCI/CUI and security protection assets

Correct Answer: D

An OSC has requested a C3PAO to conduct a Level 2 Assessment. The C3PAO has agreed, and the two organizations have collaborated to develop the Assessment Plan. Who agrees to and signs off on the Assessment Plan?

1. A. OSC and Sponsor
2. B. OSC and CMMC-AB
3. C. Lead Assessor and C3PAO
4. D. C3PAO and Assessment Official

Correct Answer: C