Demonstrate Understanding of the CMMC Source and Supplementary Documents CCP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A CCP is training a new colleague on the CMMC document structure. The colleague asks, 'What is the relationship between the CMMC Model Overview and the CMMC Assessment Guides?' Which statement best describes this relationship?

   • AThe Model Overview is a summary of the Assessment Guides.
   • BThe Assessment Guides define the practices, and the Model Overview explains how to assess them.
   • CBoth documents are independent and have no direct relationship.
   • DThe Model Overview defines the model and practices, while the Assessment Guides provide the detailed methods and objectives for evaluating those practices.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which document is the primary source that defines the CMMC model itself, including its levels, domains, and capabilities?

   • ANIST SP 800-171
   • BCMMC Assessment Guide
   • CDFARS Clause 252.204-7012
   • DCMMC Model Overview
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An organization is implementing CMMC Level 3 practices and needs to understand the enhanced security requirements for protecting CUI from advanced threats. The team is reviewing the relevant source documents. Which document should be the primary reference for these enhanced requirements?

   • ANIST SP 800-172
   • BNIST SP 800-171
   • CThe CMMC Assessment Guide (Level 2)
   • DThe CMMC Model Overview
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is implementing a CMMC Level 2 practice that requires access control for CUI. The team is unsure how to implement the technical controls. Which document would provide the most specific technical implementation guidance for this practice?

   • AThe CMMC Model Overview
   • BNIST SP 800-171
   • CThe Federal Information Processing Standards (FIPS) 200
   • DThe CMMC Assessment Guide (Level 2)
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A defense contractor is preparing for a CMMC Level 2 assessment. The assessor asks the company's IT director to identify the document that serves as the authoritative source for the specific assessment objectives (practices) that will be evaluated. Which document should the IT director reference as the primary source for these requirements?

   • AThe Code of Federal Regulations (CFR) 32 Part 170
   • BNIST SP 800-171
   • CThe CMMC Model Overview
   • DThe CMMC Assessment Guide (Level 2)
   Reveal Solution Discussion Select an answer first