Determine the Appropriate Roles/responsibilities/authority for FCI and CUI CCP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A contractor receives a request from a state agency for a copy of a CUI document that the contractor created under a federal contract. The state agency claims it needs the document for a regulatory review. What should the contractor do?

   • AAsk the state agency to sign a non-disclosure agreement before providing the document.
   • BVerify the state agency's authority to receive CUI and ensure the disclosure is consistent with the contract's CUI requirements.
   • CRefuse the request because CUI can only be shared with federal agencies.
   • DProvide the document because the state agency is a government entity.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A contractor's employee receives an email containing FCI from a government customer. The employee is not sure if they are authorized to open the attachment. What should the employee do?

   • AForward the email to their supervisor to decide whether they should access the attachment.
   • BOpen the attachment because it came from a government customer.
   • COpen the attachment and then ask for permission later.
   • DDelete the email to avoid any risk of unauthorized access.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In an organization that handles Controlled Unclassified Information (CUI), which role is typically assigned the responsibility for implementing and maintaining the organization's CUI program, including training and oversight?

   • AThe CUI Program Manager
   • BThe General Counsel
   • CThe Facilities Manager
   • DThe Human Resources Director
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A contractor's HR department wants to conduct a background check on a new employee who will handle FCI. The HR manager asks the IT department to provide the employee's email and network logs. What should the IT department do?

   • AProvide the logs only if the employee consents.
   • BAsk HR to submit a formal request that is reviewed by the appropriate authority, such as legal or security.
   • CProvide the logs because HR has a legitimate business need.
   • DRefuse to provide the logs because IT is not authorized to share employee data.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A contractor's CUI Program Manager is leaving the company. The CEO wants to assign the role to the IT director, who has no prior CUI experience. What should the CEO consider?

   • AThe CEO should assign the role to someone with CUI training and ensure they have the authority to enforce CUI policies.
   • BThe CEO should ask the government customer to appoint a new CUI Program Manager.
   • CThe IT director can assume the role immediately because they manage the systems that store CUI.
   • DThe CEO should appoint the IT director and provide on-the-job training.
   Reveal Solution Discussion Select an answer first