CCP Requirements as Assessment Team Member During Phase 2 (Conduct Assessment) CCP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An assessment team is evaluating practice IA.L1-3.5.1 (identification and authentication). The organization provides a user access policy and a sample of user account creation forms. The CCP wants to verify that the practice is implemented. What is the most appropriate evidence collection method to use in addition to examining these artifacts?

   • AAsk the system administrator to explain the user account creation process in detail.
   • BRequest a list of all user accounts and verify that each has a corresponding form.
   • CInterview the HR manager about the user account creation process.
   • DObserve a new user account being created to see if the process matches the policy and forms.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   During a Phase 2 assessment, a CCP observes that the organization's backup logs show successful backups, but the restoration testing logs indicate that no restoration test has been performed in the past year. The practice being assessed requires that restoration of backups is tested. How should the CCP document this finding?

   • AAsk the organization to perform a restoration test immediately and document the results as evidence.
   • BRecord the backup logs as evidence of compliance and note that restoration testing is a recommendation for improvement.
   • CAccept the backup logs as sufficient evidence because backups are being performed successfully.
   • DDocument the absence of restoration testing as a nonconformity, referencing the backup logs and the missing restoration test records.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A CCP is part of an assessment team evaluating a large organization. The CCP is assigned to interview the IT security team about the incident response practice. The team is large and has multiple members with different responsibilities. The CCP has limited time for the interview. What is the most effective approach for the CCP to conduct the interview?

   • AInterview the team leader only, as they can speak for the entire team.
   • BInterview a representative sample of team members who have different roles in the incident response process.
   • CInterview all team members individually to ensure comprehensive coverage.
   • DConduct a group interview with all team members at once to save time.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When a CCP identifies a nonconformity during the assessment, what should they do first?

   • AIgnore the nonconformity if it is minor
   • BDiscuss the nonconformity with other team members to decide whether to report it
   • CDocument the nonconformity and inform the lead assessor
   • DImmediately inform the organization's management and suggest corrective actions
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   During Phase 2, what is the primary purpose of observing the organization's practices?

   • ATo determine the scope of the assessment
   • BTo identify which employees should be interviewed later
   • CTo verify that documented policies are actually implemented in daily operations
   • DTo provide the organization with feedback on how to improve their processes
   Reveal Solution Discussion Select an answer first