CCP Practice Test

CCP Practice Test practice questions, page 4 of 7, with answer review and explanations.

Question 16

The evidence needed for each practice and/or process is weight for:

  1. adequacy and sufficiency.
  2. adequacy and thoroughness.
  3. sufficiency and thoroughness.
  4. sufficiency and appropriateness.

Question 17

When assessing SI.L1-3.14.2: Provide protection from malicious code at appropriate locations within organizational information systems, evidence shows that all of the OSC’s workstations and servers have antivirus software installed for malicious code protection. A centralized console for the antivirus software management is in place and records show that all devices have received the most updated antivirus patterns. What is the BEST determination that the Lead Assessor should reach regarding the evidence?

  1. It is sufficient, and the audit finding can be rated as MET.
  2. It is insufficient, and the audit finding can be rated NOT MET.
  3. It is sufficient, and the Lead Assessor should seek more evidence.
  4. It is insufficient, and the Lead Assessor should seek more evidence.

Question 18

Which statement BEST describes the key references a Lead Assessor should refer to and use the:

  1. DoD adequate security checklist for covered defense information.
  2. CMMC Model Overview as it provides assessment methods and objects.
  3. safeguarding requirements from FAR Clause 52.204-21 for a Level 2 Assessment.
  4. published CMMC Assessment Guide practice descriptions for the desired certification level.

Question 19

As defined in the CMMC-AB Code of Professional Conduct, what term describes any contract between two legal entities?

  1. Union
  2. Accord
  3. Alliance
  4. Agreement

Question 20

During a CMMC readiness review, the OSC proposes that an associated enclave should not be applicable in the scope. Who is responsible for verifying this request?

  1. CCP
  2. C3PAO
  3. Lead Assessor
  4. Advisory Board