CCP Role in Phase 4 (Evaluation of Outstanding Assessment POA&M Items) CCP Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A CCP is evaluating a POA&M item and finds that the OSC has not provided sufficient evidence. The lead assessor is about to close the item because the OSC has a good reputation. What should the CCP do?

   • ACommunicate the evidence gap to the lead assessor and recommend follow-up.
   • BRemain silent to avoid conflict with the lead assessor.
   • CEscalate the issue to the CMMC AB without informing the lead assessor.
   • DClose the item because the lead assessor has the final say.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which step is part of the POA&M item evaluation process?

   • AConducting a full re-assessment of all controls
   • BDeveloping the organization's remediation plan
   • CApproving the organization's budget for remediation
   • DVerifying that remediation has been implemented
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A CCP is evaluating a POA&M item for physical security. The OSC provided evidence of a new access control system, but the CCP determines the system does not meet the required level of protection. What should the CCP do?

   • ADocument the item as unresolved and recommend follow-up actions.
   • BAsk the lead assessor to close the item without further review.
   • CMark the item as closed because the OSC implemented a new system.
   • DAccept the evidence and note the shortfall in the final report.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a specific responsibility of a Certified CMMC Professional (CCP) during Phase 4?

   • AConducting the initial scoping of the assessment environment
   • BDeveloping the organization's remediation plan for each finding
   • CSupporting the lead assessor and performing assigned tasks related to POA&M evaluation
   • DMaking the final decision on whether a POA&M item is closed
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A CCP is reviewing evidence for a POA&M item about configuration management. The OSC provides a screenshot of a system configuration. What is the most appropriate way to verify this evidence?

   • AMark the item as closed because the screenshot is provided.
   • BAccept the screenshot as sufficient because it shows the configuration.
   • CRequest additional evidence, such as a system-generated report or a live demonstration.
   • DAsk the OSC to sign the screenshot to confirm its authenticity.
   Reveal Solution Discussion Select an answer first