New Year Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

CMMC-CCP Exam Dumps - Certified CMMC Professional (CCP) Exam

Go to page:
Question # 17

An assessment is being conducted at a remote client site. For the duration of the assessment, the client has provided a designated hoteling space in their secure facility which consists of a desk with access to a shared printer. After noticing that the desk does not lock, a locked cabinet is requested but the client does not have one available. At the end of the day, the client provides a printout copy of an important network diagram. The diagram is clearly marked and contains CUI. What should be done NEXT to protect the document?

A.

Take it with them to review in the evening.

B.

Leave it on the desk for review the following day.

C.

Put it in the unlocked desk drawer for review the following morning.

D.

Take a picture with the personal phone before securely shredding it.

Full Access
Question # 18

A CCP is on their first assessment for CMMC Level 2 with an Assessment Team and is reviewing the CMMC Assessment Process to understand their responsibilities. Which method gathers information from the subject matter experts to facilitate understanding and achieve clarification?

A.

Test

B.

Examine

C.

Interview

D.

Assessment

Full Access
Question # 19

An assessment procedure consists of an assessment objective, potential assessment methods, and assessment objects. Which statement is part of an assessment objective?

A.

Specifications and mechanisms

B.

Examination, interviews, and testing

C.

Determination statement related to the practice

D.

Exercising assessment objects under specified conditions

Full Access
Question # 20

While conducting a CMMC Assessment, an individual from the OSC provides documentation to the assessor for review. The documentation states an incident response capability is established and contains information on incident preparation, detection, analysis, containment, recovery, and user response activities. Which CMMC practice is this documentation attesting to?

A.

IR.L2-3.6.1: Incident Handling

B.

IR.L2-3.6.2: Incident Reporting

C.

IR.L2-3.6.3: Incident Response Testing

D.

IR.L2-3.6.4: Incident Spillage

Full Access
Question # 21

A Lead Assessor is planning an assessment and scheduling the test activities. Who MUST perform tests to obtain evidence?

A.

OSC personnel who normally perform that work as the CCP observes

B.

Military personnel and the CCP and/or Lead Assessor to test the adequacy of the written procedure(s)

C.

Military personnel assigned to the contractor for that contract to ensure the confidentiality of the CUI

D.

OSC personnel who do not ordinarily perform that work to evaluate the accuracy of the written procedure(s)

Full Access
Question # 22

A Level 2 Assessment of an OSC is winding down and the final results are being prepared to present to the OSC. When should the final results be delivered to the OSC?

A.

At the end of every day of the assessment

B.

Daily and during a final separately scheduled review

C.

Either at the final Daily Checkpoint, or during a separately scheduled findings and recommendation review

D.

Either after approval from the C3PAO. or during a separately scheduled final recommended findings review

Full Access
Question # 23

Which phase of the CMMC Assessment Process includes the task to identify, obtain inventory, and verify evidence?

A.

Phase 1: Plan and Prepare Assessment

B.

Phase 2: Conduct Assessment

C.

Phase 3: Report Recommended Assessment Results

D.

Phase 4: Remediation of Outstanding Assessment Issues

Full Access
Question # 24

Regarding the Risk Assessment (RA) domain, what should an OSC periodically assess?

A.

Organizational operations, business assets, and employees

B.

Organizational operations, business processes, and employees

C.

Organizational operations, organizational assets, and individuals

D.

Organizational operations, organizational processes, and individuals

Full Access
Go to page: