An assessor is evaluating a system-generated audit log as evidence for a CMMC practice. Which characteristic of this evidence is most important for its quality?

The log is stored in a spreadsheet

The log is reviewed by the system administrator

The log is generated automatically by the system

An assessor is evaluating the implementation of incident response practice IR.L2-3.6.2 (training). The organization provides a training syllabus and a sign-in sheet from a training session held 18 months ago. The assessment period is the last 12 months. What is the most appropriate action?

Accept the evidence because training was conducted within the last two years.

Mark the practice as 'Not Implemented' because the training is outdated.

Use the syllabus as evidence that the training is available, regardless of when it was delivered.

Request evidence of training conducted within the assessment period.

An assessor is evaluating the implementation of access control practice AC.L2-3.1.1. The organization provides a user access review report from their identity management system. The report shows that access reviews were conducted quarterly, but the report only includes the last two quarters. The assessment period is 12 months. The organization explains that the earlier quarters were lost due to a system migration. What is the most appropriate action?

Request alternative evidence, such as meeting minutes or email notifications, to cover the missing quarters.

Use the two quarters as a representative sample and assume the practice was implemented for the full period.

Accept the evidence because the organization explained the loss and the report shows a pattern of reviews.

Mark the practice as 'Not Implemented' because the evidence is incomplete.

An assessor is evaluating evidence for a CMMC practice that requires physical security controls. Which location would be the most appropriate source of evidence for this practice?

The organization's network diagram

The organization's cloud service provider's compliance certifications

The organization's employee training records

The organization's data center access logs and security camera footage

Which factor is most important when evaluating the quality of evidence for a CMMC assessment?

The evidence is stored in a secure location

The evidence is relevant to the specific practice being assessed

The evidence is approved by management

CMMC Certified Professional

Domain 4Objective 3

usage of Evidence CCP Practice Questions (Page 1)

Part of the CMMC Model Construct and Implementation Evaluation domain, which accounts for 35% of the CCP exam.

16questions here

4free pages

4concepts

35%of the exam

Questions 1–5

1foundation · easy
An assessor is evaluating a system-generated audit log as evidence for a CMMC practice. Which characteristic of this evidence is most important for its quality?
Select an answer first
2application · medium
An assessor is evaluating the implementation of incident response practice IR.L2-3.6.2 (training). The organization provides a training syllabus and a sign-in sheet from a training session held 18 months ago. The assessment period is the last 12 months. What is the most appropriate action?
Select an answer first
3expert · hard
An assessor is evaluating the implementation of access control practice AC.L2-3.1.1. The organization provides a user access review report from their identity management system. The report shows that access reviews were conducted quarterly, but the report only includes the last two quarters. The assessment period is 12 months. The organization explains that the earlier quarters were lost due to a system migration. What is the most appropriate action?
Select an answer first
4foundation · easy
An assessor is evaluating evidence for a CMMC practice that requires physical security controls. Which location would be the most appropriate source of evidence for this practice?
Select an answer first
5foundation · easy
Which factor is most important when evaluating the quality of evidence for a CMMC assessment?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CCP” is a trademark of its owner, used for identification only.