CCP Role in Phase 3 (Report Assessment Results) CCP Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard · select all that apply

   A CCP is compiling the assessment results report for a Level 2 assessment. The report must include several key components to be complete and useful. Which of the following are key components that the CCP must ensure are included in the report? (Select all that apply.)

   • AA list of all non-conformities with their status and corrective action plans.
   • BA recommendation for the organization's future business strategy.
   • CA copy of the organization's internal audit reports from the past year.
   • DA detailed list of all evidence collected during the assessment.
   • EA summary of the assessment scope and methodology.
   Check answers Discussion Select an answer first
2. 12application · medium

   A CCP is assisting an organization that has completed a Level 2 assessment. The organization is a prime contractor and must submit its results to the DoD. The CCP notices that the report is missing the signature of the organization's senior official. What should the CCP do?

   • ASubmit the report without the signature because it is not a required component.
   • BSign the report on behalf of the organization to expedite the process.
   • CAdvise the organization that the report must be signed by the senior official before submission to the DoD.
   • DAdvise the organization to submit the report to the CMMC-AB for approval instead of the DoD.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A CCP is reviewing the assessment results report before it is finalized. The report includes a finding that the organization's access control policy is not fully implemented. What must the CCP ensure is included in the report for this finding?

   • AA description of the finding, evidence, and the specific CMMC practice or process that was not met.
   • BA list of all employees who are affected by the access control policy.
   • CA recommendation to hire a third-party consultant to fix the issue.
   • DA statement that the organization is generally compliant despite the finding.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   During Phase 3 of a CMMC assessment, which task is a primary responsibility of the Certified CMMC Professional (CCP)?

   • APreparing the final assessment results report that documents findings and evidence
   • BSelecting the assessment team members and assigning their roles
   • CImplementing corrective actions to remediate identified non-conformities
   • DConducting interviews with the organization's personnel to gather evidence
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   To which entity does the C3PAO submit the final CMMC assessment results?

   • AThe Cybersecurity Maturity Model Certification Accreditation Body (CMMC-AB)
   • BThe DoD Chief Information Officer (CIO)
   • CThe organization's legal counsel
   • DThe Department of Defense (DoD) via the CMMC Assessment Results database
   Reveal Solution Discussion Select an answer first