Demonstrate Understanding of the CMMC Source and Supplementary Documents CCP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In the hierarchy of CMMC documents, which document is at the top and provides the overarching framework for the model?

   • ACMMC Model Overview
   • BCMMC Assessment Guide
   • CDFARS Clause 252.204-7012
   • DNIST SP 800-171
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A consultant is helping a client understand the origin of the CMMC practices. The client asks, 'Where do the actual CMMC practices come from?' Which response correctly identifies the source documents that define these practices?

   • AThe practices are defined solely by the CMMC Assessment Guides.
   • BThe practices are derived from a combination of NIST SP 800-171, NIST SP 800-172, and other federal regulations.
   • CThe practices are created by the Defense Industrial Base (DIB) companies themselves.
   • DThe practices are defined by the Federal Acquisition Regulation (FAR).
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A small business is implementing CMMC Level 1 practices and is unsure how to interpret a specific practice related to basic safeguarding of federal contract information (FCI). The team wants to understand the intent and expected implementation of this practice. Which supplementary document would provide the most relevant guidance?

   • ANIST SP 800-172
   • BThe Federal Information Security Modernization Act (FISMA)
   • CThe CMMC Model Overview
   • DThe CMMC Assessment Guide (Level 1)
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the role of the CMMC Assessment Guide in defining assessment objectives?

   • AIt establishes the legal basis for CMMC compliance
   • BIt translates the model's practices into specific assessment objectives
   • CIt defines the practices for each CMMC level
   • DIt provides the security requirements for CUI protection
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What type of guidance do supplementary documents typically provide for CMMC implementation?

   • AThe legal penalties for non-compliance
   • BThe official CMMC levels and capabilities
   • CAdditional controls and context for implementing practices
   • DThe assessment scoring methodology
   Reveal Solution Discussion Select an answer first