CMMC-CCP Free Practice Test

The results package for a Level 2 Assessment is being submitted. What MUST a Final Report. CMMC Assessment Results include?

1. A. Affirmation for each practice or control
2. B. Documented rationale for each failed practice
3. C. Suggested improvements for each failed practice
4. D. Gaps or deltas due to any reciprocity model are recorded as met

Correct Answer: B

An assessor has been working with an OSC's point of contact to plan and prepare for their upcoming assessment. What is one of the MOST important things to remember when analyzing requirements for an assessment?

1. A. Scoping an assessment is easy and worry-free.
2. B. The initial plan cannot be changed once agreed upon.
3. C. There is a determined amount of time that the OSC's point of contact has to submit evidence and rough order-of-magnitude.
4. D. Assessors need to continuously review and update the requirements and plan for the assessment as information is gathered.

Correct Answer: D

According to DFARS clause 252.204-7012, who is responsible for determining that Information in a given category should be considered CUI?

1. A. The NARA CUI Executive Agent
2. B. The contractor who generated the information
3. C. The DoD agency for whom the contractor is performing the work
4. D. The military personnel assigned to the contractor for that purpose

Correct Answer: C

An OSC performing a CMMC Level 1 Self-Assessment uses a legacy Windows 95 computer, which is the only system that can run software that the government contract requires. Why can this asset be considered out of scope?

1. A. It handles CUI
2. B. It is a restricted IS
3. C. It is government property
4. D. It is operational technology

Correct Answer: B

When are contractors required to achieve a CMMC certificate at the Level specified in the solicitation?

1. A. At the time of award
2. B. Upon solicitation submission
3. C. Thirty days from the award date
4. D. Before the due date of submission

Correct Answer: A