CCP Role in Phase 4 (Evaluation of Outstanding Assessment POA&M Items) CCP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   During Phase 4, a CCP discovers that a POA&M item cannot be resolved because the OSC lacks the necessary resources. What should the CCP do?

   • AKeep the finding to themselves to avoid conflict.
   • BCommunicate the issue to the lead assessor and recommend follow-up actions.
   • CMark the item as closed and note the resource issue in the report.
   • DDirect the OSC to allocate resources immediately.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A CCP is evaluating a POA&M item for system integrity. The OSC provided a new patch management procedure and a log of recent patches. What is the next step in the evaluation process?

   • AAsk the OSC to provide a written statement that the procedure is followed.
   • BImmediately mark the item as closed because evidence was provided.
   • CDocument the item as open because the procedure is new.
   • DVerify that the procedure is implemented and the logs demonstrate compliance.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A CCP is documenting the results of a POA&M item evaluation. The OSC provided evidence that they have implemented a control, but the evidence is not sufficient to fully verify the implementation. The lead assessor wants to close the item because the OSC has a good track record. What should the CCP do?

   • AMark the item as closed and note the evidence gap in the report.
   • BClose the item because the lead assessor has the final say.
   • CEscalate the issue to the CMMC AB because the lead assessor is biased.
   • DDocument the item as partially addressed and communicate the evidence gap.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A CCP is evaluating a POA&M item and finds that the OSC has implemented a control, but the implementation does not fully meet the requirement. What should the CCP communicate to the lead assessor?

   • AThe item is open because the implementation is not perfect.
   • BThe item is partially addressed and may require additional remediation.
   • CThe item is closed and no further action is needed.
   • DThe item should be escalated to the CMMC AB immediately.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which action is appropriate for a POA&M item that cannot be resolved during Phase 4?

   • ARemoving it from the assessment scope
   • BReclassifying it as a non-finding
   • CEscalating it to the appropriate authority
   • DMarking it as closed to meet deadlines
   Reveal Solution Discussion Select an answer first