Question 1

Ethics is a shared responsibility between:

Options :

A : DoD and CMMC-AB.

B : OSC and sponsors.

C : CMMC-AB and members of the CMMC Ecosystem.

D : members of the CMMC Ecosystem and Lead Assessors.

Answer: C

Question 2

In scoping a CMMC Level 1 Self-Assessment, all of the computers and digital assets that handle FCI are identified. A file cabinet that contains paper FCI is also identified. What can this file cabinet BEST be determined to be?

Options :

A : In scope, because it is an asset that stores FCI

B : In scope, because it is part of the same physical location

C : Out of scope, because they are all only paper documents

D : Out of scope, because it does not process or transmit FCI

Answer: A

Question 3

How does the CMMC define a practice?

Options :

A : A business transaction

B : A condition arrived at by experience or exercise

C : A series of changes taking place in a defined manner

D : An activity or activities performed to meet defined CMMC objectives

Answer: D

Question 4

Which authority leads the CMMC direction, standards, best practices, and knowledge framework for how to map the controls and processes across different Levels that range from basic cyber hygiene to advanced cyber practices?

Options :

A : NIST

B : DoD CIO office

C : Federal CIO office

D : Defense Federal Acquisition Regulation Council

Answer: B

Question 5

A C3PAO is conducting High Level Scoping for an OSC that requested an assessment Which term describes the people, processes, and technology that will be applied to the contract who are requesting a CMMC Level assessment?

Options :

A : Host Unit

B : Branch Office

C : Coordinating Unit

D : Supporting Organization/Units

Answer: D