CCP Requirements as Assessment Team Member During Phase 2 (Conduct Assessment) CCP Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   An assessment team is evaluating practice CM.L2-3.4.1 (configuration management). The organization has a configuration management policy and a change management process. The CCP observes that the change management process is followed for major changes, but minor changes are made directly by administrators without documentation. The organization argues that minor changes do not require documentation. What should the CCP do?

   • ADocument the observation as a nonconformity because the practice requires all configuration changes to be managed and documented.
   • BAccept the organization's argument because minor changes are not significant enough to require documentation.
   • CNote the observation as a suggestion for improvement rather than a nonconformity.
   • DRecommend that the organization update its policy to exclude minor changes from the documentation requirement.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   During Phase 2 of a CMMC assessment, what is the primary responsibility of a CCP serving as an Assessment Team Member?

   • AMake the final certification decision for the organization
   • BCollect and examine evidence to support the assessment team's findings
   • CApprove the scope of the assessment before it begins
   • DProvide consulting advice to help the organization remediate gaps
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A CCP is part of an assessment team. During a break, the organization's IT manager offers the CCP a gift card as a token of appreciation for the team's hard work. What is the most appropriate action for the CCP to take?

   • AAccept the gift card and share it with the rest of the assessment team.
   • BAccept the gift card and thank the IT manager for their generosity.
   • CAccept the gift card but disclose it in the assessment report.
   • DDecline the gift card and report the offer to the lead assessor.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is a boundary that a CCP must respect when serving as an Assessment Team Member?

   • AThe CCP may only evaluate practices within their area of expertise
   • BThe CCP may provide remediation guidance to the organization during the assessment
   • CThe CCP must not make certification decisions or act as the lead assessor
   • DThe CCP must collect evidence without documenting any observations
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following is a method used to collect evidence during a CMMC assessment?

   • AConducting interviews with key personnel
   • BAnalyzing the organization's financial statements
   • CReviewing the organization's marketing materials
   • DReviewing the organization's social media presence
   Reveal Solution Discussion Select an answer first