CCP Requirements as Assessment Team Member During Phase 2 (Conduct Assessment) CCP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which activity is a key part of Phase 2 (Conduct Assessment) in the CMMC assessment process?

   • AImplementing corrective actions for identified gaps
   • BIssuing the final certification decision
   • CDeveloping the assessment plan and defining the scope
   • DConducting interviews with the organization's personnel
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   During a Phase 2 assessment, a CCP identifies a nonconformity in the organization's media protection practice. The CCP has documented the evidence and is ready to report it. What is the most appropriate next step for the CCP?

   • AWait until the end of the assessment to report all nonconformities at once.
   • BInclude the nonconformity in the final assessment report and submit it directly to the CMMC Accreditation Body.
   • CReport the nonconformity to the lead assessor with the supporting evidence and observations.
   • DInform the organization's point of contact about the nonconformity and discuss potential remediation.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary reference document that defines the assessment procedures and standards used during a CMMC assessment?

   • AThe CMMC Assessment Guide
   • BThe NIST SP 800-171 DoD Assessment Methodology
   • CThe Federal Acquisition Regulation (FAR)
   • DThe ISO/IEC 27001 standard
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An assessment team is evaluating practice SI.L1-3.14.1 (system and information integrity). The organization provides a network diagram showing an intrusion detection system (IDS) and a policy document describing incident response procedures. The CCP is asked to verify the practice. What combination of evidence collection methods should the CCP use to obtain sufficient evidence?

   • ARequest a copy of the IDS configuration file and compare it to the network diagram.
   • BAsk the organization to provide a written statement confirming that the IDS is operational.
   • CInterview the system administrator about how the IDS is monitored and observe a demonstration of the monitoring process.
   • DExamine the network diagram and policy document only, as they are the primary artifacts for this practice.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A CCP is part of an assessment team evaluating a Level 2 organization. During the assessment, the CCP identifies a nonconformity in practice AU.L2-3.3.1 (audit logging). The organization's security manager argues that the practice is implemented because they have a logging tool, but the CCP finds that the tool is not configured to log the required events. The security manager becomes defensive and questions the CCP's expertise. What is the most appropriate action for the CCP to take?

   • ARe-examine the evidence and consider the security manager's argument before finalizing the finding.
   • BDocument the nonconformity with evidence of the configuration gap and report it to the lead assessor.
   • CAsk the security manager to provide additional documentation to support their claim.
   • DDefer to the security manager's expertise and accept the logging tool as evidence of implementation.
   Reveal Solution Discussion Select an answer first