Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
ISACA

CMMC Certified Assessor

CCA

The CMMC Certified Assessor (CCA) certification equips experienced cybersecurity and compliance professionals with the advanced skills needed to conduct formal CMMC Level 2 certification assessments. As the credential required to evaluate organizations for the US Department of War's CMMC ecosystem, CCA holders verify security controls, review evidence, and determine whether organizations handling Controlled Unclassified Information (CUI) meet CMMC Level 2 requirements. This certification is essential for those performing official assessments and advancing in the defense industrial base.

Practice Free Questions

117 practice questions · Updated 2026-07-30

4Domains
6Objectives
36Concepts
117Questions

CCA Curriculum

Every domain, objective, and concept the CCA exam measures.

Assess the various environmental considerations of Organizations Seeking Certification (OSCs) against CMMC Level 2 practices

6 concepts · 28 questions
  1. Environmental Considerations Overview
  2. Physical Environment Assessment
  3. Logical Environment Assessment
  4. Personnel Environment Assessment
  5. External Environment Assessment
  6. Integration of Environmental Considerations

Analyze the CMMC assessment scope of Controlled Unclassified Information (CUI) assets using the five categories of CUI assets as defined in the CMMC Level 2 Assessment Scoping Guide

5 concepts · 10 questions
  1. CUI asset categories
  2. Scoping process for CUI assets
  3. Categorization of assets
  4. Scope boundaries
  5. Documentation of scope

Evaluate the CMMC assessment scope considerations based on the CMMC Level 2 Assessment Scoping Guide

10 concepts · 20 questions
  1. CMMC Level 2 Assessment Scoping Guide Overview
  2. Scoping Considerations for CMMC Level 2
  3. Asset Categorization in Scoping
  4. Handling External Cloud Service Providers
  5. Scoping for External Service Providers
  6. Scoping for Specialized Assets
  7. Scoping for Cloud and Virtualization
  8. Scoping for Mobile and Remote Access
  9. Scoping for Physical and Personnel Security
  10. Documenting the Assessment Scope

Given a scenario, apply the appropriate phases and steps to plan, prepare, conduct, and report on a CMMC Level 2 Assessment

6 concepts · 26 questions
  1. Assessment Planning
  2. Assessment Preparation
  3. Assessment Conduct
  4. Assessment Reporting
  5. Phases and Steps Sequencing
  6. Scenario Application

Identify evidence verification/validation methods and objects for practices based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) documentation

7 concepts · 28 questions
  1. Evidence Verification Methods
  2. Evidence Validation Methods
  3. Evidence Objects
  4. Evidence Collection Procedures
  5. Evidence Sufficiency and Sampling
  6. Evidence Handling and Chain of Custody
  7. Mapping Evidence to Practices
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Practice Free Questions

Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for CCA, so none is invented.