CCP Practice Test

CCP Practice Test practice questions, page 7 of 7, with answer review and explanations.

Question 31

Which example represents a Specialized Asset?

  1. SOCs
  2. Hosted VPN services
  3. Consultants who provide cybersecurity services
  4. All property owned or leased by the government

Question 32

When assessing an OSC for CMMC, the Lead Assessor should use the information from the Discussion and Further Discussion sections in each practice because it:

  1. is normative for an OSC to follow.
  2. contains examples that an OSC must implement.
  3. is mandatory and aligns with FAR Clause 52.204-21.
  4. provides additional information to facilitate the assessment of the practice.

Question 33

An OSC has requested a C3PAO to conduct a Level 2 Assessment. The C3PAO has agreed, and the two organizations have collaborated to develop the Assessment Plan. Who agrees to and signs off on the Assessment Plan?

  1. OSC and Sponsor
  2. OSC and CMMC-AB
  3. Lead Assessor and C3PAO
  4. C3PAO and Assessment Official

Question 34

Which regulation allows for whistleblowers to sue on behalf of the federal government?

  1. NIST SP 800-53
  2. NIST SP 800-171
  3. False Claims Act
  4. Code of Professional Conduct