Identify and Compare Roles/responsibilities/requirements of Authorities Across the CMMC Ecosystem CCP Practice Questions (Page 1)

Questions 1–5

1. 1application · easy

   A company is new to the CMMC ecosystem and is trying to understand the role of the DoD in the overall program. Which of the following best describes the DoD's primary role?

   • AProviding cybersecurity training to contractors
   • BAccrediting C3PAOs and certifying assessors
   • CEstablishing the CMMC model, levels, and requirements that contractors must meet
   • DConducting assessments for all defense contractors
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a primary role of the CMMC Accreditation Body (CMMC-AB) in the CMMC ecosystem?

   • AEnforcing compliance with CMMC requirements in federal contracts
   • BDeveloping the CMMC model and its assessment guides
   • CAccrediting C3PAOs and certifying assessors
   • DIssuing CMMC certificates to organizations that achieve a specific level
   Reveal Solution Discussion Select an answer first
4. 3application · easy

   A company is evaluating whether to pursue CMMC certification and is trying to understand the role of the CMMC-AB in the process. Which of the following is a primary responsibility of the CMMC-AB?

   • AEnforcing compliance through contract penalties
   • BDeveloping the CMMC model and its levels
   • CConducting assessments for contractors
   • DAccrediting C3PAOs and certifying individual assessors
   Reveal Solution Discussion Select an answer first
5. 4application · easy

   A CMMC assessor is reviewing the roles of various entities in the ecosystem. Which entity is responsible for developing and maintaining the CMMC model itself, including the practices and assessment objectives?

   • AThe National Institute of Standards and Technology (NIST)
   • BThe Department of Defense (DoD)
   • CThe C3PAO that conducts the assessment
   • DThe CMMC Accreditation Body (CMMC-AB)
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A defense contractor is preparing for a CMMC assessment and receives conflicting guidance from its internal security team and a consultant. The security team insists that the CMMC-AB directly oversees the contractor's compliance. The consultant argues that the DoD is the ultimate authority. Which statement accurately describes the relationship between these authorities?

   • ABoth the DoD and the CMMC-AB have equal authority over contractor compliance, with no clear division of responsibilities.
   • BThe DoD directly assesses contractors for CMMC compliance, and the CMMC-AB only provides training materials.
   • CThe CMMC-AB sets the CMMC model and requirements, while the DoD accredits the C3PAOs.
   • DThe CMMC-AB accredits and oversees the assessment organizations (C3PAOs) that assess contractors, while the DoD establishes the CMMC model and requirements that contractors must meet.
   Reveal Solution Discussion Select an answer first