Identify Evidence Verification/validation Methods and Objects for Practices Based on the CMMC Level 2 Assessment Guide and CMMC Assessment Process (CAP) Documentation CCA Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An assessor collects a log file from a server and stores it on a USB drive. To maintain chain of custody, what additional action is most important?

   • AMake a copy of the log file and store it on a personal laptop
   • BDelete the log file from the server after collection
   • CDocument the collection details and secure the USB drive in a locked container
   • DShare the log file with the organization's IT team for analysis
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following best describes the process of mapping evidence to practices?

   • AGrouping evidence by type (e.g., documents, logs)
   • BLinking each piece of evidence to the specific practice it supports
   • CRanking evidence by importance
   • DSummarizing evidence in a report
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   According to the CMMC Assessment Process (CAP) documentation, what is the first step in the evidence collection procedure?

   • AIdentify the evidence needed for each practice
   • BDocument the chain of custody
   • CValidate the evidence after collection
   • DCollect all available data without a plan
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   During evidence collection, an assessor must ensure that the evidence is collected in a manner that preserves its integrity. Which procedure is directly related to this requirement?

   • ACollecting evidence only from the primary system
   • BCollecting evidence in a random order
   • CDocumenting the collection date and time
   • DUsing a standardized evidence collection form
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An assessor has collected the following evidence: an access control policy, a user access review report, and a screenshot of the account management console. Which CMMC Level 2 practice is this evidence most directly mapped to?

   • AMaintain a baseline configuration of systems
   • BImplement an incident response plan
   • CImplement a risk management plan for supply chain
   • DLimit system access to authorized users, programs, or processes
   Reveal Solution Discussion Select an answer first