CCP Role in Phase 3 (Report Assessment Results) CCP Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard · select all that apply

   A CCP is advising an organization on the submission of its Level 2 assessment results to the DoD. The organization is unsure about the correct procedures. Which of the following are appropriate actions for the CCP to take? (Select all that apply.)

   • ASubmit the report to the DoD on behalf of the organization using the CCP's credentials.
   • BOffer to review the assessment report before submission to ensure it is complete.
   • CAdvise the organization on the required signatures and attestations for the report.
   • DExplain the submission process, including the required portal and any deadlines.
   • EAdvise the organization to submit the report to the CMMC-AB for approval before sending it to the DoD.
   Check answers Discussion Select an answer first
2. 22foundation · easy

   Which stakeholder group should the CCP communicate the assessment results to within the organization?

   • AThe organization's leadership and relevant stakeholders
   • BOnly the organization's external auditors
   • COnly the organization's legal department
   • DOnly the organization's security team
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which component is a key part of the assessment results report in a CMMC assessment?

   • ADetailed findings for each assessed practice, including evidence
   • BThe organization's financial statements for the past year
   • CA list of all employees and their job titles
   • DThe organization's marketing plan for the next fiscal year
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   During a Level 2 assessment, the CCP identifies a non-conformity in the system and communications protection practice. The organization's corrective action plan includes a timeline for remediation. How should the CCP document this in the report?

   • ADocument only the non-conformity and the evidence, leaving out the corrective action plan.
   • BRecord the non-conformity as a minor issue and omit the corrective action plan to avoid overcomplicating the report.
   • CInclude the non-conformity, the evidence, the corrective action plan, and the target completion date.
   • DWait until the corrective action is completed before documenting the non-conformity.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is included in the assessment results report to support each finding?

   • AThe organization's internal policies and procedures
   • BThe organization's corrective action plan
   • CThe evidence collected during the assessment
   • DThe names of all assessment team members
   Reveal Solution Discussion Select an answer first