Question 1

When scoping the organizational system, the scope of applicability for the cybersecurity CUI practices applies to the components of:

Options :

A : federal systems that process, store, or transmit CUI.

B : nonfederal systems that process, store, or transmit CUI.

C :

federal systems that process, store, or transmit CUI. or that provide protection for the system components.

D :

nonfederal systems that process, store, or transmit CUI. or that provide protection for the system components.

Answer: B

Question 2

A C3PAO is conducting High Level Scoping for an OSC that requested an assessment Which term describes the people, processes, and technology that will be applied to the contract who are requesting a CMMC Level assessment?

Options :

A : Host Unit

B : Branch Office

C : Coordinating Unit

D : Supporting Organization/Units

Answer: D

Question 3

Which domain has a practice requiring an organization to restrict, disable, or prevent the use of nonessential programs?

Options :

A : Access Control (AC)

B : Media Protection (MP)

C : Asset Management (AM)

D : Configuration Management (CM)

Answer: D

Question 4

Ethics is a shared responsibility between:

Options :

A : DoD and CMMC-AB.

B : OSC and sponsors.

C : CMMC-AB and members of the CMMC Ecosystem.

D : members of the CMMC Ecosystem and Lead Assessors.

Answer: C

Question 5

A contractor provides services and data to the DoD. The transactions that occur to handle FCI take place over the contractor's business network, but the work is performed on contractor-owned systems, which must be configured based on government requirements and are used to support a contract. What type of Specialized Asset are these systems?

Options :

A : loT

B : Restricted IS

C :

Test equipment

D : Government property

Answer: B