CMMC-CCP Free Practice Test

An organization's sales representative is tasked with entering FCI data into various fields within a spreadsheet on a company-issued laptop. This laptop is an FCI Asset being used to:

1. A. process and transmit FCI.
2. B. process and organize FCI.
3. C. store, process, and transmit FCI.
4. D. store, process, and organize FCI.

Correct Answer: C

What is objectivity as it applies to activities with the CMMC-AB?

1. A. Ensuring full disclosure
2. B. Reporting results of CMMC services completely
3. C. Avoiding the appearance of or actual, conflicts of interest
4. D. Demonstrating integrity in the use of materials as described in policy

Correct Answer: C

A contractor stores security policies, system configuration files, and audit logs in a centralized file repository for later review. According to CMMC terminology, the file repository is being used to:

1. A. protect CUI.
2. B. transmit CUI.
3. C. store CUI.
4. D. generate CUI

Correct Answer: C

Which document specifies the CMMC Level 1 practices that correspond to basic safeguarding requirements?

1. A. NIST SP 800-171
2. B. NIST SP 800-171b
3. C. 48 CFR 52.204-21
4. D. DFARS 252.204-7012

Correct Answer: C

An Assessment Team is conducting interviews with team members about their roles and responsibilities. The team member responsible for maintaining the antivirus program knows that it was deployed but has very little knowledge on how it works. Is this adequate for the practice?

1. A. Yes, the antivirus program is available, so it is sufficient.
2. B. Yes, antivirus programs are automated to run independently.
3. C. No, the team member must know how the antivirus program is deployed and maintained.
4. D. No, the team member's interview answers about deployment and maintenance are insufficient.

Correct Answer: C