Demonstrate Understanding of Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) in Nonfederal Unclassified Networks CCP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What distinguishes Controlled Unclassified Information (CUI) from Federal Contract Information (FCI)?

   • ACUI is always classified, while FCI is unclassified
   • BCUI is only found in government systems, while FCI is only in contractor systems
   • CCUI requires safeguarding and dissemination controls, while FCI requires only basic safeguarding
   • DCUI is exempt from all security requirements, while FCI is not
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the role of individual employees in safeguarding FCI and CUI?

   • AThey are responsible for developing the security policies
   • BThey are responsible for conducting CMMC assessments
   • CThey have no responsibility because it is the organization's duty
   • DThey must follow the organization's security policies and handle information appropriately
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A contractor is reviewing its information security policies. The contractor handles both FCI and CUI under different contracts. Which of the following statements accurately reflects a key difference in how FCI and CUI must be handled?

   • AFCI is subject to the same regulatory requirements as CUI.
   • BFCI requires more stringent security controls than CUI.
   • CFCI requires safeguarding, but CUI requires safeguarding and dissemination controls.
   • DFCI is always marked, while CUI is never marked.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is providing IT support services to a federal agency under a contract. During the course of the contract, the company generates a report that summarizes system performance data. The report is not marked as CUI and is not classified. Which of the following best describes this report?

   • AIt is public information because it is unclassified and not marked.
   • BIt is FCI because it is generated for the government under a contract and is not intended for public release.
   • CIt is classified information because it is generated for the government.
   • DIt is CUI because it is generated for the government and contains technical data.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A contractor is reviewing its handling procedures for information received from the government. The contractor has a procedure for FCI that includes basic safeguarding, and a procedure for CUI that includes more stringent controls. Which of the following statements correctly explains why CUI requires more stringent controls than FCI?

   • ACUI is classified information, while FCI is unclassified.
   • BCUI is always more sensitive than FCI, so it requires more controls.
   • CCUI is owned by the government, while FCI is owned by the contractor.
   • DCUI requires safeguarding and dissemination controls, while FCI only requires basic safeguarding.
   Reveal Solution Discussion Select an answer first