New Year Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

CMMC-CCP Exam Dumps - Certified CMMC Professional (CCP) Exam

Go to page:
Question # 25

In the CMMC Model, how many practices are included in Level 2?

A.

17 practices

B.

72 practices

C.

110 practices

D.

180 practices

Full Access
Question # 26

An OSC has requested a C3PAO to conduct a Level 2 Assessment. The C3PAO has agreed, and the two organizations have collaborated to develop the Assessment Plan. Who agrees to and signs off on the Assessment Plan?

A.

OSC and Sponsor

B.

OSC and CMMC-AB

C.

Lead Assessor and C3PAO

D.

C3PAO and Assessment Official

Full Access
Question # 27

An OSC has submitted evidence for an upcoming assessment. The assessor reviews the evidence and determines it is not adequate or sufficient to meet the CMMC practice. What can the assessor do?

A.

Notify the CMMC-AB.

B.

Cancel the assessment.

C.

Postpone the assessment.

D.

Contact the C3PAO for guidance.

Full Access
Question # 28

The CMMC Level 2 assessment methods include examination and can include:

A.

documents, mechanisms, or activities.

B.

specific hardware, software, or firmware safeguards employed within a system.

C.

policies, procedures, security plans, penetration tests, and security requirements.

D.

observation of system backup operations, exercising a contingency plan, and monitoring network traffic.

Full Access
Question # 29

Which entity specifies the required CMMC Level in Requests for Information and Requests for Proposals?

A.

DoD

B.

NARA

C.

NIST

D.

Department of Homeland Security

Full Access
Question # 30

A CCP is working as an Assessment Team Member on a CMMC Level 2 Assessment. The Lead Assessor has assigned the CCP to assess the OSC's Configuration Management (CM) domain. The CCP's first interview is with a subject-matter expert for user-installed software. With respect to user-installed software, what facet should the CCP's interview focus on?

A.

Controlled and monitored

B.

Removed from the system

C.

Scanned for malicious code

D.

Limited to mission-essential use only

Full Access
Question # 31

The Lead Assessor is presenting the Final Findings Presentation to the OSC. During the presentation, the Assessment Sponsor and OSC staff inform the assessor that they do not agree with the assessment results. Who has the final authority for the assessment results?

A.

C3PAO

B.

CMMC-AB

C.

Assessment Team

D.

Assessment Sponsor

Full Access
Question # 32

Per DoDI 5200.48: Controlled Unclassified Information (CUI), CUI is marked by whom?

A.

DoD OUSD

B.

Authorized holder

C.

Information Disclosure Official

D.

Presidentialauthorized Original Classification Authority

Full Access
Go to page: