A contractor receives a government contract to design a custom component. The contract includes a technical data package with controlled drawings and a list of required performance specifications. Which of the following items in the contractor's possession is Federal Contract Information (FCI)?

The contractor's proprietary design for a similar component developed before the contract

The contractor's internal quality manual used for all projects

Publicly available industry standards referenced in the contract

The performance specifications provided by the government in the contract

An organization is preparing its FCI asset scope statement. They have identified a database that stores FCI, a web server that hosts the application, and a backup server that stores encrypted backups. Which of the following is the most complete scope statement?

Only the database is in scope because it directly stores FCI.

The database, web server, and backup server are in scope because they store, process, or support FCI.

All assets in the organization are in scope because FCI is present.

The web server and backup server are in scope, but the database is out of scope because it is the primary storage.

A company uses a cloud-based file-sharing service to collaborate on FCI. The service is accessed via the internet. The company also has an on-premises file server that is not connected to the internet. Which of the following is the correct scope boundary?

Only the cloud file-sharing service

Only the on-premises file server

The internet connection and the cloud service

The cloud service and the on-premises file server

A company has a shared network drive that contains FCI. The drive is accessible to all employees, but only the contracts team actually uses FCI. The network drive is backed up to a cloud storage service. Which asset is classified as indirectly supporting FCI?

The contracts team's workstations

CMMC Certified Professional

Domain 6Objective 2

Analyze a Scenario to Generate the Appropriate FCI Asset Scope CCP Practice Questions (Page 3)

Part of the Scoping domain, which accounts for 15% of the CCP exam.

15questions here

3free pages

5concepts

15%of the exam

Questions 11–15

11foundation · easy
A contractor receives a government contract to design a custom component. The contract includes a technical data package with controlled drawings and a list of required performance specifications. Which of the following items in the contractor's possession is Federal Contract Information (FCI)?
Select an answer first
12application · medium
An organization is preparing its FCI asset scope statement. They have identified a database that stores FCI, a web server that hosts the application, and a backup server that stores encrypted backups. Which of the following is the most complete scope statement?
Select an answer first
13application · medium
A company uses a cloud-based email service to send and receive FCI. The email service is accessed via a web browser on employee laptops. The laptops also have a local file storage that does not contain FCI. Which asset is classified as directly handling FCI?
Select an answer first
14application · medium
A company uses a cloud-based file-sharing service to collaborate on FCI. The service is accessed via the internet. The company also has an on-premises file server that is not connected to the internet. Which of the following is the correct scope boundary?
Select an answer first
15application · medium
A company has a shared network drive that contains FCI. The drive is accessible to all employees, but only the contracts team actually uses FCI. The network drive is backed up to a cloud storage service. Which asset is classified as indirectly supporting FCI?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCP” is a trademark of its owner, used for identification only.