CCP Role in Phase 4 (Evaluation of Outstanding Assessment POA&M Items) CCP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A CCP is part of a Phase 4 assessment team. The lead assessor assigns the CCP the task of reviewing evidence for a POA&M item. What is the CCP's primary responsibility in this situation?

   • ASkip the review if the OSC claims the item is resolved.
   • BDelegate the review to another team member and focus on other tasks.
   • CPerform the assigned review and report findings to the lead assessor.
   • DIndependently decide whether the item is closed and inform the OSC.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   During Phase 4, a CCP is evaluating a POA&M item for access control. The organization provided a new policy document and a screenshot of an access review meeting. The CCP notices the policy references a system that is not in the assessment scope. What is the most appropriate action?

   • AMark the item as closed and note the scope discrepancy in the final report.
   • BAccept the evidence as sufficient because the policy is documented and the meeting occurred.
   • CRequest additional evidence that specifically addresses the in-scope system and its implementation.
   • DEscalate directly to the OSC's management without consulting the lead assessor.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In the context of Phase 4, which action is within the scope of a CCP's responsibilities?

   • APerforming assigned evaluation tasks and supporting the lead assessor
   • BApproving the organization's remediation schedule
   • CDeciding which POA&M items require additional evidence
   • DAssigning the final POA&M closure status to each item
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What should be done with a POA&M item that remains unresolved after evaluation?

   • AIgnore it in the final report
   • BNote it for follow-up or escalation
   • CDelete it from the assessment records
   • DAutomatically close it
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   To whom should a CCP communicate findings regarding POA&M items?

   • AThe lead assessor and other team members
   • BThe organization's legal counsel
   • CThe organization's customers
   • DThe public
   Reveal Solution Discussion Select an answer first