New Year Special Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: scxmas70

CMMC-CCP Exam Dumps - Certified CMMC Professional (CCP) Exam

Go to page:
Question # 41

The Assessment Team has completed Phase 2 of the Assessment Process. In conducting Phase 3 of the Assessment Process, the Assessment Team is reviewing evidence to address Limited Practice Deficiency Corrections. How should the team score practices in which the evidence shows the deficiencies have been corrected?

A.

MET

B.

POA&M

C.

NOT MET

D.

NOT APPLICABLE

Full Access
Question # 42

Which domain references the requirements needed to handle physical or digital assets containing CUI?

A.

Media Protection (MP)

B.

Physical Protection (PE)

C.

System and Information Integrity (SI)

D.

System and Communications Protection (SC)

Full Access
Question # 43

As defined in the CMMC-AB Code of Professional Conduct, what term describes any contract between two legal entities?

A.

Union

B.

Accord

C.

Alliance

D.

Agreement

Full Access
Question # 44

What is objectivity as it applies to activities with the CMMC-AB?

A.

Ensuring full disclosure

B.

Reporting results of CMMC services completely

C.

Avoiding the appearance of or actual, conflicts of interest

D.

Demonstrating integrity in the use of materials as described in policy

Full Access
Question # 45

The evidence needed for each practice and/or process is weight for:

A.

adequacy and sufficiency.

B.

adequacy and thoroughness.

C.

sufficiency and thoroughness.

D.

sufficiency and appropriateness.

Full Access
Question # 46

During the planning phase of the Assessment Process. C3PAO staff are reviewing the various entities associated with an OSC that has requested a CMMC Level 2 Assessment. Which term describes the people, processes, and technology external to the HQ Organization that participate in the assessment but will not receive a CMMC Level unless an enterprise Assessment is conducted?

A.

Host Unit

B.

Organization

C.

Coordinating Unit

D.

Supporting Organization/Unit

Full Access
Question # 47

Which government agency are DoD contractors required to report breaches of CUI to?

A.

FBI

B.

NARA

C.

DoD Cyber Crime Center

D.

Under Secretary of Defense for Intelligence and Security

Full Access
Question # 48

Which statement BEST describes the requirements for a C3PA0?

A.

An authorized C3PAO must meet some DoD and all ISO/IEC 17020 requirements.

B.

An accredited C3PAO must meet all DoD and some ISO/IEC 17020 requirements.

C.

AC3PAO must be accredited by DoD before being able to conduct assessments.

D.

A C3PAO must be authorized by CMMC-AB before being able to conduct assessments.

Full Access
Go to page: