CMMC-CCP CMMC Practice Questions

An OSC lead has provided company information, identified that they are seeking CMMC Level 2, stated that they handle FCI. identified stakeholders, and provided assessment logistics. The OSC has provided the company's cyber hygiene practices that are posted on every workstation, visitor logs, and screenshots of the configuration of their FedRAMP- approved applications. The OSC has not won any DoD government contracts yet but is working on two proposals Based on this information, which statement BEST describes the CMMC Level 2 Assessment requirements?

• AA. Ready because there is no need to certify this company until after they win a DoD contract.
• BB. Not ready because the OSC is not on contract because they do not know the scope of FCI protection required by the contract.
• CC. Not ready because the OSC still lacks artifacts that prove they have implemented all the CMMC Level 2 Assessment requirements.
• DD. Ready because all DoD contractors are required to achieve CMMC Level 2; therefore, they are being proactive in seeking certification.

For a CMMC Level 2 certification, which organization maintains a non-disclosure agreement with the OSC?

• AA. NIST
• BB. C3PAO
• CC. CMMC-AB
• DD. OUSD A&S

A contractor stores security policies, system configuration files, and audit logs in a centralized file repository for later review. According to CMMC terminology, the file repository is being used to:

• AA. protect CUI.
• BB. transmit CUI.
• CC. store CUI.
• DD. generate CUI