A contractor is preparing a scope statement for a CMMC assessment. Which of the following best describes the purpose of the scope statement?

To provide a detailed network diagram of the entire organization

To list all security controls that will be implemented

To record the results of the assessment

To document which assets are in scope and why, to ensure the assessment covers all relevant systems

A contractor has a network that includes a file server with FCI, a print server, and a domain controller. The print server is used by all employees, but only the contracts team accesses FCI. The domain controller provides authentication for the entire network. Which asset is classified as indirectly supporting FCI?

The contracts team's workstations

CMMC Certified Professional

Domain 6Objective 2

Analyze a Scenario to Generate the Appropriate FCI Asset Scope CCP Practice Questions (Page 2)

Part of the Scoping domain, which accounts for 15% of the CCP exam.

15questions here

3free pages

5concepts

15%of the exam

Questions 6–10

6application · medium
A company receives FCI in the form of engineering drawings. The drawings are stored on a file server. The engineering team accesses the drawings via a CAD application installed on their workstations. The CAD application also accesses a license server. Which asset is NOT in scope for FCI handling?
Select an answer first
7foundation · easy
A contractor is preparing a scope statement for a CMMC assessment. Which of the following best describes the purpose of the scope statement?
Select an answer first
8application · medium
A company has a network that is segmented into two VLANs. VLAN A contains the FCI file server and the workstations that access it. VLAN B contains the HR system and the payroll server. The two VLANs are connected by a router. Which of the following is the correct scope boundary?
Select an answer first
9expert · hard
A contractor receives FCI via a file transfer protocol (FTP) server. The FTP server is hosted on a virtual machine that also hosts a web server for public marketing. The virtual machine is on a network segment that also includes a database server that stores FCI. Which asset is directly handling FCI?
Select an answer first
10expert · hard
A contractor has a network that includes a file server with FCI, a print server, and a domain controller. The print server is used by all employees, but only the contracts team accesses FCI. The domain controller provides authentication for the entire network. Which asset is classified as indirectly supporting FCI?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCP” is a trademark of its owner, used for identification only.

Analyze a Scenario to Generate the Appropriate FCI Asset Scope CCP Practice Questions (Page 2)

Questions 6–10

A company receives FCI in the form of engineering drawings. The drawings are stored on a file server. The engineering team accesses the drawings via a CAD application installed on their workstations. The CAD application also accesses a license server. Which asset is NOT in scope for FCI handling?

A contractor is preparing a scope statement for a CMMC assessment. Which of the following best describes the purpose of the scope statement?

A company has a network that is segmented into two VLANs. VLAN A contains the FCI file server and the workstations that access it. VLAN B contains the HR system and the payroll server. The two VLANs are connected by a router. Which of the following is the correct scope boundary?

Keep studying — Scoping