Identify and Apply Knowledge of the Guiding Principles and Practices of the CMMC-AB Code of Professional Conduct (CoPC)/ISO/IEC/DOW Requirements CCP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which ISO/IEC standard is most relevant to the CMMC-AB's requirements for organizations that perform CMMC assessments?

   • AISO/IEC 27002
   • BISO/IEC 17020
   • CISO/IEC 17024
   • DISO/IEC 20000
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A CMMC assessor is conducting a Level 2 assessment for a defense contractor. During the assessment, the assessor discovers that the contractor's system security plan (SSP) contains a control implementation description that appears to have been copied verbatim from a template provided by a consulting firm that also offers CMMC preparation services. The assessor suspects the description may not reflect the actual environment. What is the most appropriate action for the assessor to take?

   • AIgnore the template language because the SSP is a planning document and does not need to be perfectly accurate.
   • BAsk the contractor to revise the SSP to remove any template language before continuing the assessment.
   • CImmediately report the suspected fraud to the CMMC-AB and recommend the contractor be disqualified from the assessment.
   • DDocument the observation and verify the actual implementation through direct evidence, such as system configuration reviews and interviews with personnel.
   Reveal Solution Discussion Select an answer first
4. 18expert · medium

   A CMMC assessor is also a part-time instructor for a CMMC training course. The assessor is assigned to assess a contractor whose employees attended the assessor's training course. The assessor has no other relationship with the contractor. What is the most appropriate action for the assessor to take?

   • AProceed with the assessment because the training course is a public offering and does not create a conflict of interest.
   • BRecuse themselves from the assessment because any prior interaction with the contractor's employees could compromise objectivity.
   • CProceed with the assessment but avoid any discussion of the training course with the contractor.
   • DDisclose the training relationship to the C3PAO and the contractor, and let them decide if the assessor should proceed.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which principle of the CMMC-AB Code of Professional Conduct requires professionals to be fair and impartial in their assessments?

   • AIntegrity
   • BProfessionalism
   • CConfidentiality
   • DObjectivity
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of the Duties of the Workforce (DOW) requirements in the CMMC ecosystem?

   • ATo define the technical skills required for each CMMC role
   • BTo specify the legal penalties for non-compliance with CMMC rules
   • CTo establish the organizational structure of CMMC assessment bodies
   • DTo outline the ethical and professional responsibilities of individuals in the CMMC workforce
   Reveal Solution Discussion Select an answer first