Demonstrate Understanding of the CMMC Source and Supplementary Documents CCP Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   Why is it important to use the current version of CMMC source documents?

   • ABecause older versions are no longer available
   • BBecause updates may change requirements and assessment procedures
   • CBecause only the latest version is legally binding
   • DBecause updates only affect assessment guides, not the model
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is preparing for a CMMC Level 2 assessment and is reviewing its System Security Plan (SSP). The team discovers that a practice they implemented is based on a requirement that was removed in the latest revision of NIST SP 800-171. The CMMC Model Overview they are using is the current version. What is the most appropriate course of action?

   • AKeep the practice in place because it provides additional security, even if it is no longer a CMMC requirement.
   • BRemove the practice and document the change in the SSP, as it is no longer required by the current CMMC model.
   • CVerify that the current CMMC Model Overview and Assessment Guide still reference the practice, and align the implementation with the current requirements.
   • DImmediately update the SSP to remove the practice, as the assessor will flag any practice not in the current NIST SP 800-171.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How do CMMC source documents, such as the Model Overview, define the practices that organizations must implement?

   • ABy listing the federal regulations that mandate compliance
   • BBy offering implementation guidance for each control
   • CBy providing assessment procedures for each practice
   • DBy specifying the practices and processes for each CMMC level
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company is preparing for a CMMC assessment and has been using a printed copy of the CMMC Model Overview from the initial release. The CCP advising the company insists they must download the latest version from the official DoD website. What is the primary reason for this insistence?

   • AThe DoD requires all CMMC documentation to be stored electronically.
   • BThe printed copy is missing the watermark that proves it is an official document.
   • CThe CMMC Model Overview is updated periodically, and using an outdated version could lead to implementing obsolete practices.
   • DThe printed copy is not legally admissible as evidence in the assessment.
   Reveal Solution Discussion Select an answer first