Apply the Appropriate CMMC Source Documents to Evaluate CMMC Practice Implementation (minimum Coverage of Level 1 Practices) CCP Practice Questions (Page 3)

Questions 11–13

1. 11foundation · easy

   An organization has implemented all CMMC Level 1 practices except for SC.L1-3.13.1, which requires monitoring, controlling, and protecting organizational communications. Based on the CMMC Level 1 source document criteria, what is the organization's compliance status?

   • ACompliant, because SC.L1-3.13.1 is optional for Level 1
   • BCompliant, because the organization can submit a Plan of Action and Milestones (POA&M) for this practice
   • CNot compliant, because the organization must also implement all Level 2 practices
   • DNot compliant, because all Level 1 practices must be implemented
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An assessor is preparing for a CMMC Level 1 assessment of a contractor that handles Federal Contract Information (FCI). The contractor's IT manager asks which source document defines the specific practices that will be assessed. Which document should the assessor reference?

   • AThe NIST SP 800-171 document, which contains the full set of security requirements.
   • BThe FAR Clause 52.204-21, which is the only source for Level 1 practices.
   • CThe CMMC Model Overview document, which lists all practices across all levels.
   • DThe CMMC Level 1 Practices document, which details the 17 practices required for Level 1.
   Reveal Solution Discussion Select an answer first
3. 13application · medium

   An assessor is preparing for a CMMC Level 1 assessment and needs to understand the role of the CMMC Model Overview document. Which statement best describes its role?

   • AIt provides the detailed implementation guidance for each practice.
   • BIt is the authoritative source for the Level 1 practices.
   • CIt contains the assessment methodology for Level 1.
   • DIt defines the structure of the model and the levels, but not the specific practices.
   Reveal Solution Discussion Select an answer first