CCP Practice Test

CCP Practice Test practice questions, page 5 of 7, with answer review and explanations.

Question 21

What is the BEST description of the purpose of FAR clause 52.204-21?

  1. It directs all covered contractors to install the cyber security systems listed in that clause.
  2. It describes all of the safeguards that contractors must take to secure covered contractor IS.
  3. It describes the minimum standard of care that contractors must take to secure covered contractor IS.
  4. It directs covered contractors to obtain CMMC Certification at the level equal to the lowest requirement of their contracts.

Question 22

Which principles are included in defining the CMMC-AB Code of Professional Conduct?

  1. Objectivity, classification, and information accuracy
  2. Objectivity, confidentiality, and information integrity
  3. Responsibility, classification, and information accuracy
  4. Responsibility, confidentiality, and information integrity

Question 23

In late September, CA.L2-3.12.1: Periodically assess the security controls in organizational systems to determine if the controls are effective in their application is assessed. Procedure specifies that a security control assessment shall be conducted quarterly. The Lead Assessor is only provided the first quarter assessment report because the person conducting the second quarter’s assessment is currently out of the office and will return to the office in two hours. Based on this information, the Lead Assessor should determine that the evidence is:

  1. sufficient, and rate the audit finding as MET.
  2. insufficient, and rate the audit finding as NOT MET.
  3. sufficient, and re-rate the audit finding after a quarter two assessment report is examined.
  4. insufficient, and re-rate the audit finding after a quarter two assessment report is examined.

Question 24

Which MINIMUM Level of certification must a contractor successfully achieve to receive a contract award requiring the handling of CUI?

  1. Level 1
  2. Level 2
  3. Level 3
  4. Any level

Question 25

CA.L2-3.12.2: Plan of Action defines the clear goal or objective for the plan. What information is generally NOT a part of a plan of action?

  1. Completion dates
  2. Milestones to measure progress
  3. Ownership of who is accountable for ensuring plan performance
  4. Budget requirements to implement the plan’s remediation actions