Determine the Appropriate Roles/responsibilities/authority for FCI and CUI CCP Practice Questions (Page 4)

Questions 16–20

1. 16expert · medium

   A contractor's FCI includes a spreadsheet with cost data. The finance department wants to use the data for internal budgeting, but the contract states that FCI is only to be used for the performance of the contract. What should the contractor do?

   • AProhibit finance from using the data for any purpose other than the contract.
   • BAllow finance to use the data if they sign a confidentiality agreement.
   • CAsk the government customer for permission to use the data for internal budgeting.
   • DAllow finance to use the data because it is internal and will not be shared externally.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A small business that is a subcontractor on a DoD contract receives FCI from the prime contractor. The business owner wants to know who is responsible for ensuring that FCI is protected. Which role should the owner assign?

   • AThe business owner, as the senior leader, who must establish and enforce the security program.
   • BThe contract manager, because they handle the contract documents.
   • CThe government customer, because they are the source of the FCI.
   • DThe IT administrator, because they manage the systems that store the FCI.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a responsibility of an employee who is authorized to access Controlled Unclassified Information (CUI)?

   • ATo mark CUI documents with the appropriate CUI marking
   • BTo report all CUI to the federal government
   • CTo decontrol CUI when they believe it is no longer sensitive
   • DTo ensure CUI is only used for official purposes and is not disclosed without authorization
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A defense contractor handles Controlled Unclassified Information (CUI) for a DoD program. The program manager wants to share CUI with a subcontractor to expedite a deliverable. The subcontractor is not yet included in the contract's CUI flow-down provisions. What should the program manager do?

   • AAsk the government customer for verbal permission to share the CUI with the subcontractor.
   • BShare only the non-sensitive portions of the CUI, keeping the most critical parts until the flow-down is in place.
   • CWait until the subcontractor is added to the contract with appropriate CUI flow-down clauses before sharing any CUI.
   • DShare the CUI now and add the flow-down clause later to avoid delaying the deliverable.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A contractor's CUI includes a technical report that is marked 'CUI'. The contractor's marketing department wants to use a summary of the report in a public brochure. What should the contractor do?

   • APublish the summary because the marketing department has a legitimate business need.
   • BReview the summary to determine if it contains CUI, and if so, do not publish it without authorization.
   • CUse the summary because it is not the full report and therefore not CUI.
   • DPublish the summary after removing all CUI markings.
   Reveal Solution Discussion Select an answer first