CMMC-CCP 무료 덤프문제 온라인 액세스

When planning an assessment, the Lead Assessor should work with the OSC to select personnel to be interviewed who could:

• A.provide clarity and understanding of their practice activities.
• B.be a senior person in the company.
• C.have a security clearance.
• D.demonstrate expertise on the CMMC requirements.

During the planning phase of the Assessment Process. C3PAO staff are reviewing the various entities associated with an OSC that has requested a CMMC Level 2 Assessment. Which term describes the people, processes, and technology external to the HQ Organization that participate in the assessment but will not receive a CMMC Level unless an enterprise Assessment is conducted?

• A.Organization
• B.Host Unit
• C.Supporting Organization/Unit
• D.Coordinating Unit

A CMMC Level 1 Self-Assessment identified an asset in the OSC ' s facility that does not process, store, or transmit FCI. Which type of asset is this considered?

• A.Government-Issued Assets
• B.Out-of-Scope Assets
• C.Specialized Assets
• D.FCI Assets

A contractor has implemented IA.L2-3.5.3: Multifactor Authentication practice for their privileged users, however, during the assessment it was discovered that the OSC ' s standard users do not require MFA to access their endpoints and network resources. What would be the BEST finding?

• A.Practice is NOT MET since the objective was not implemented.
• B.It is out of scope as this is a new acquisition.
• C.The new acquisition is considered Specialized Assets.
• D.The process is running correctly.

Which standard and regulation requirements are the CMMC Model 2.0 based on?

• A.NIST SP 800-171 and NIST SP 800-172
• B.DFARS, FIPS 100, and NIST SP 800-171
• C.DFARS, NIST, and Carnegie Mellon University
• D.DFARS, FIPS 100, NIST SP 800-171, and Carnegie Mellon University