Assess the Various Environmental Considerations of Organizations Seeking Certification (OSCs) Against CMMC Level 2 Practices CCA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   During a logical environment assessment, which of the following is the primary focus when evaluating the OSC's network architecture?

   • AThe physical location of network switches and routers
   • BThe number of employees who have access to the network
   • CThe brand of network equipment used in the environment
   • DThe segmentation of networks to separate sensitive data from other systems
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An OSC's facility is located in a region prone to natural disasters, such as floods and earthquakes. The assessor notes that the server room is in the basement and there is no off-site backup. Which physical environment consideration is most relevant?

   • AThe risk of unauthorized access to the facility during a disaster.
   • BThe risk of employees being unable to reach the facility.
   • CThe risk of power outages affecting CUI systems.
   • DThe risk of physical damage to CUI systems due to natural disasters.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   During an initial assessment of an OSC, the assessor is identifying factors that could affect the implementation of CMMC Level 2 practices. Which of the following is an example of a logical environmental factor?

   • AThe network segmentation between the corporate and production environments
   • BThe contractual terms with a cloud service provider for data hosting
   • CThe physical layout of the data center and its proximity to a flood zone
   • DThe percentage of employees who have completed security awareness training
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An assessor is reviewing the various environments that can affect an OSC's CMMC Level 2 compliance. Which of the following is an example of an external environmental factor?

   • AThe cybersecurity requirements imposed by a prime contractor in the supply chain
   • BThe security awareness training program for new hires
   • CThe access control system used to secure the server room
   • DThe operating system version running on the OSC's workstations
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An OSC uses a legacy operating system on several workstations that process CUI. The vendor no longer provides security updates. Which logical environment consideration is most critical?

   • AThe workstations may not be compatible with modern security software.
   • BThe workstations may not support encryption.
   • CThe workstations are vulnerable to known exploits that cannot be patched.
   • DThe workstations may have performance issues.
   Reveal Solution Discussion Select an answer first