Identify and Compare Roles/responsibilities/requirements of Authorities Across the CMMC Ecosystem CCP Practice Questions (Page 3)

Questions 11–15

1. 11expert · medium

   A defense contractor is preparing for a CMMC Level 2 assessment and has received conflicting information about the role of the DoD in the assessment process. Some sources say the DoD will be directly involved in the assessment, while others say the DoD only reviews the results. Which statement best describes the DoD's role in a typical CMMC Level 2 assessment?

   • AThe DoD is responsible for conducting the assessment if the contractor is a prime contractor.
   • BThe DoD is not directly involved in the assessment; a C3PAO conducts the assessment, and the DoD may review the results for contract award decisions.
   • CThe DoD must approve the C3PAO's assessment plan before the assessment can begin.
   • DThe DoD sends a representative to observe every CMMC Level 2 assessment.
   Reveal Solution Discussion Select an answer first
2. 12application · easy

   A company is considering becoming a C3PAO. They are reviewing the requirements and oversight structure. Which authority will accredit them and oversee their performance?

   • AThe Federal Acquisition Regulatory Council (FAR Council)
   • BThe DoD
   • CThe CMMC-AB (The Cyber AB)
   • DThe Defense Contract Management Agency (DCMA)
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which authority requires that C3PAOs be accredited by the CMMC-AB before they can conduct assessments?

   • AThe DoD
   • BThe C3PAO itself
   • CThe Defense Industrial Base (DIB)
   • DThe CMMC-AB
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   A C3PAO is preparing to conduct a CMMC Level 2 assessment for a contractor. The contractor asks the C3PAO to also provide consulting services to help them remediate any gaps found during the assessment. The C3PAO is considering this request. Which of the following is the most appropriate action?

   • AProvide the consulting services, but have a different assessor from the same C3PAO conduct the assessment.
   • BDecline the consulting request to avoid a conflict of interest, as it would compromise the independence of the assessment.
   • CProvide the consulting services only if the contractor signs a waiver.
   • DProvide the consulting services, but document the arrangement in the assessment report.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does the role of the DoD differ from that of the CMMC-AB in the CMMC ecosystem?

   • AThe DoD sets the requirements, while the CMMC-AB manages the accreditation and certification of assessors
   • BThe DoD certifies individual assessors, while the CMMC-AB issues CMMC certificates to companies
   • CThe DoD conducts assessments, while the CMMC-AB enforces contract compliance
   • DThe DoD accredits C3PAOs, while the CMMC-AB develops the CMMC model
   Reveal Solution Discussion Select an answer first