CMMC CCP 시험 - Cyber AB실제시험문제와 답 - 140문항

Question No : 1

An organization that manufactures night vision cameras is looking for help to address the gaps identified in physical access control systems.
Which certified individual should they approach for implementation support?

A.CCA of the C3PAO performing the assessment
B.RP of an organization not part of the assessment
C.Practitioner of the organization performing the assessment LTP
D.DoD Contract Official of the organization performing the assessment

정답:

Question No : 2

A machining company has been awarded a contract with the DoD to build specialized parts. Testing of the parts will be done by the company using in-house staff and equipment.
For a Level 1 Self-Assessment, what type of asset is this?

A.CUI Asset
B.In-scope Asset
C.Specialized Asset
D.Contractor Risk Managed Asset

정답:

Question No : 3

Which domain has a practice requiring an organization to restrict, disable, or prevent the use of nonessential programs?

A.Access Control (AC)
B.Media Protection (MP)
C.Asset Management (AM)
D.Configuration Management (CM)

정답:

Question No : 4

Which term describes "the protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to. or modification of information"?

A.Adopted security
B.Adaptive security
C.Adequate security
D.Advanced security

정답:

Question No : 5

During the planning phase of the Assessment Process. C3PAO staff are reviewing the various entities associated with an OSC that has requested a CMMC Level 2 Assessment.
Which term describes the people, processes, and technology external to the HQ Organization that participate in the assessment but will not receive a CMMC Level unless an enterprise Assessment is conducted?

A.Host Unit
B.Organization
C.Coordinating Unit
D.Supporting Organization/Unit

정답:

Question No : 6

A client uses an external cloud-based service to store, process, or transmit data that is reasonably believed to qualify as CUI. According to DFARS clause 252.204-7012.
What set of established security requirements MUST that cloud provider meet?

A.FedRAMP Low
B.FedRAMP Moderate
C.FedRAMP High
D.FedRAMP Secure

정답:

Question No : 7

What is a PRIMARY activity that is performed while conducting an assessment?

A.Develop assessment plan.
B.Collect and examine evidence.
C.Verify readiness to conduct assessment.
D.Deliver recommended assessment results.

정답:

Question No : 8

During an assessment, the Lead Assessor reviews the evidence for each CMMC in-scope practice that has been reviewed, verified, rated, and discussed with the OSC during the daily reviews. The Assessment Team records the final recommended MET or NOT MET rating and prepares to present the results to the assessment participants during the final review with the OSC and sponsor.
As a part of this presentation, which document MUST include the attendee list, time/date, location/meeting link, results from all discussed topics, including any resulting actions, and due dates from the OSC or Assessment Team?

A.Final log report
B.Final CMMC report
C.Final and recorded OSC CMMC report
D.Final and recorded Daily Checkpoint log

정답:

Question No : 9

What type of criteria is used to answer the question "Does the Assessment Team have the right evidence?"

A.Adequacy criteria
B.Objectivity criteria
C.Sufficiency criteria
D.Subjectivity criteria

정답:

Question No : 10

What service is the MOST comprehensive that the RPO provides?

A.Training services
B.Education services
C.Consulting services
D.Assessment services

정답:

Question No : 11

When are data and documents with legacy markings from or for the DoD required to be re-marked or redacted?

A.When under the control of the DoD
B.When the document is considered secret
C.When a document is being shared outside of the organization
D.When a derivative document's original information is not CUI

정답:

Question No : 12

An Assessment Team is conducting interviews with team members about their roles and responsibilities. The team member responsible for maintaining the antivirus program knows that it was deployed but has very little knowledge on how it works.
Is this adequate for the practice?

A.Yes, the antivirus program is available, so it is sufficient.
B.Yes, antivirus programs are automated to run independently.
C.No, the team member must know how the antivirus program is deployed and maintained.
D.No, the team member's interview answers about deployment and maintenance are insufficient.

정답:

Question No : 13

Which document is the BEST source for descriptions of each practice or process contained within the various CMMC domains?

A.CMMC Glossary
B.CMMC Appendices
C.CMMC Assessment Process
D.CMMC Assessment Guide Levels 1 and 2

정답:

Question No : 14

Which document is the BEST source for determining the sources of evidence for a given practice?

A.NISTSP 800-53
B.NISTSP 800-53A
C.CMMC Assessment Scope
D.CMMC Assessment Guide

정답:

Question No : 15

Which MINIMUM Level of certification must a contractor successfully achieve to receive a contract award requiring the handling of CUI?

A.Level 1
B.Level 2
C.Level 3
D.Any level

정답:

Cyber AB CMMC CCP 시험