CMMC-CCP Free Practice Test

An assessment is being completed at a client site that is not far from the Lead Assessor's home office. The client provides a laptop for the duration of the engagement. During a meeting with the network engineers, the Lead Assessor requests information about the network. They respond that they have a significant number of drawings they can provide via their secure cloud storage service. The Lead Assessor returns to their home office and decides to review the documents. What is the BEST way to retrieve the documents?

1. A. Log into the secure cloud storage service to save copies of the documents on both the work and client laptops.
2. B. Log into the client VPN from the client laptop and retrieve the documents from the secure cloud storage service.
3. C. Log into the client VPN from the assessor's laptop and retrieve the documents from the secure cloud storage service.
4. D. Use their home office workstation to retrieve the documents from the secure cloud storage service and save them to a USB stick.

Correct Answer: B

The CMMC Level 2 assessment methods include examination and can include:

1. A. documents, mechanisms, or activities.
2. B. specific hardware, software, or firmware safeguards employed within a system.
3. C. policies, procedures, security plans, penetration tests, and security requirements.
4. D. observation of system backup operations, exercising a contingency plan, and monitoring network traffic.

Correct Answer: A

A cyber incident is discovered that affects a covered contractor IS and the CDI residing therein. How long does the contractor have to inform the DoD?

1. A. 24 hours
2. B. 48 hours
3. C. 72 hours
4. D. 96 hours

Correct Answer: C

Which words summarize categories of data disposal described in the NIST SP 800-88 Revision 1, Guidelines for Media Sanitation?

1. A. Clear, purge, destroy
2. B. Clear, redact, destroy
3. C. Clear, overwrite, purge
4. D. Clear, overwrite, destroy

Correct Answer: A

The practices in CMMC Level 2 consists of the security requirements specified in:

1. A. NISTSP 800-53.
2. B. NISTSP 800-171.
3. C. 48 CFR 52.204-21.
4. D. DFARS 252.204-7012.

Correct Answer: B