Determine the Appropriate Roles/responsibilities/authority for FCI and CUI CCP Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A contractor's CUI Program Manager is responsible for ensuring that CUI is properly marked. The program manager discovers that a department has been using an outdated marking standard. What should the program manager do?

   • AAsk the department to continue using the outdated marking until the next contract.
   • BIgnore the issue because the outdated marking is still recognizable as CUI.
   • CReport the department to the government customer.
   • DUpdate the department's marking procedures and provide training on the current standard.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In an organization that handles Federal Contract Information (FCI), which role is primarily responsible for ensuring that FCI is only shared with personnel who have a legitimate need to know for contract performance?

   • AEvery employee who accesses or handles FCI
   • BThe external auditor
   • CThe Chief Information Security Officer (CISO)
   • DThe Contracting Officer's Representative (COR)
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A prime contractor receives Federal Contract Information (FCI) from a government customer. The contract requires the contractor to implement CMMC Level 1 practices. The contractor's IT manager wants to grant all employees access to the FCI so they can 'see what the government is asking for.' Which action best aligns with the contractor's responsibilities for FCI?

   • ARestrict access to FCI to only those employees with a legitimate business need, and document the access control decisions.
   • BDelegate the decision to the IT manager, who can use their discretion to grant access as they see fit.
   • CAllow all employees access because FCI is unclassified and therefore not sensitive.
   • DAsk the government customer for a waiver to allow all employees to access FCI.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A contractor's CUI includes a list of controlled technical data. An employee accidentally emails this list to a personal email address. What should the employee do immediately?

   • AReport the incident to the CUI Program Manager or security officer immediately.
   • BAsk the recipient to delete the email and not share it.
   • CIgnore the incident because it was an accident and the data is not classified.
   • DDelete the email from the personal account and hope no one sees it.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Who has the authority to make decisions about the dissemination of Controlled Unclassified Information (CUI) within an organization?

   • AThe federal government agency that originally provided the CUI
   • BAny employee who has access to the CUI
   • CThe CUI Program Manager or other designated authorized holder
   • DThe organization's legal counsel
   Reveal Solution Discussion Select an answer first