Given a Scenario, Apply the Appropriate Phases and Steps to Plan, Prepare, Conduct, and Report on a CMMC Level 2 Assessment CCA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   After completing evidence collection for a CMMC Level 2 assessment, the assessor finds that several practices are not implemented as required. What is the assessor's next step in the reporting phase?

   • ARe-assess the practices to confirm the findings before writing the report.
   • BImmediately notify the organization's senior management and recommend corrective actions.
   • CProvide the organization with a list of remediation steps and schedule a follow-up assessment.
   • DDocument the findings, determine the overall compliance status, and prepare the assessment report.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An assessor is conducting a CMMC Level 2 assessment and realizes that the assessment scope was not clearly defined during planning. What should the assessor do?

   • AContinue the assessment and make assumptions about the scope.
   • BSkip the scope definition and proceed to the reporting phase.
   • CPause the assessment and return to the planning phase to clarify the scope.
   • DAsk the organization to define the scope during the conduct phase.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   An assessor has completed the planning and preparation phases for a CMMC Level 2 assessment. What is the next phase the assessor should execute?

   • AConduct the assessment
   • BRe-plan the assessment
   • CReport the findings
   • DPrepare additional documentation
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is an initial step in planning a CMMC Level 2 assessment?

   • AConducting interviews with system users
   • BDefining the assessment scope and objectives
   • CWriting the final assessment report
   • DTesting security controls
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A small business is preparing for its first CMMC Level 2 assessment. The owner is confused about the difference between the planning and preparation phases. Which statement correctly distinguishes the two?

   • APlanning defines the scope and objectives, while preparation involves gathering documentation and defining roles.
   • BPlanning involves collecting evidence, while preparation involves writing the report.
   • CPlanning and preparation are interchangeable terms for the same activities.
   • DPlanning is only for the assessor, while preparation is only for the organization.
   Reveal Solution Discussion Select an answer first