Cyber AB Certified CMMC Assessor (CCA) - CMMC-CCA무료 덤프문제 풀어보기
A C3PAO has contracted by an OSC to perform its assessment. Before the assessment, the Lead Assessor asks the OSC to provide an extensive list of evidence, some of which is optional and beyond the minimum requirements. The OSC is not able to fulfill the entire request. One missing document was a current and organized list of the OSC's evidence and mappings.
Given that this is a Level 2 Assessment, what should the Lead Assessor tell the OSC?
Given that this is a Level 2 Assessment, what should the Lead Assessor tell the OSC?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
During a CMMC Level 2 Assessment, a CCA interviewed a system administrator on the OSC's procedures around configuration management and endpoint security. The system administrator described how they build and deploy new systems, and noted that some users require specialized applications for their jobs. Users have been asked to email IT when they install and run an additional application so IT can add it to their list of allowed software.
What must the CCA conclude?
What must the CCA conclude?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
An Assessor is examining documents provided by the OSC POC. While reviewing them, the Assessor notes that several of the procedures have very current dates while the bulk do not. What should the Assessor do in order to decide if these new documents are acceptable as evidence?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
The OSC POC has supplied all of the procedures, policies, and plans at the start of the assessment. One of the assessors notes that some of the documents have very recent approval dates, while others have been in place for several years based on the document history.
In order to ensure the review of this evidence is sufficient, what is the BEST step to validate the sufficiency of these documents?
In order to ensure the review of this evidence is sufficient, what is the BEST step to validate the sufficiency of these documents?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
When a new employee is issued a laptop, only the user's credentials need to be set up. According to the IT department, the IT manager is the only person who can change laptop setup and user privileges. What documentation should be examined to determine if this is the case?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
A Lead Assessor is conducting an assessment for an OSC. The Lead Assessor is collecting evidence regarding the OSC's network separation techniques. Which technique would be considered a logical separation technique and would fall within the scope of the assessment?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
During a CMMC Assessment, the assessor is determining if the Escort Visitors practice is MET. Personnel with which of the following responsibilities would be MOST appropriate to interview?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
A company employs an encrypted VPN to enhance confidentiality over remote connections. The CCA reads a document describing the VPN. It states the VPN allows automated monitoring and control of remote access sessions, helps detect cyberattacks, and supports auditing of remote access to ensure compliance with CMMC requirements.
What document is the CCA MOST LIKELY reviewing to see how these VPNs are controlled and monitored?
What document is the CCA MOST LIKELY reviewing to see how these VPNs are controlled and monitored?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
The assessment team has divided responsibilities to review portions of the OSC's scope, including the Host Unit, the specific enclave, and supporting teams such as a Managed Security Service Provider (MSSP).
During evidence review, the team notices that MSSP personnel answered interview questions somewhat differently than OSC personnel. To clarify this inconsistency, the Lead Assessor decides to take all the following steps EXCEPT:
During evidence review, the team notices that MSSP personnel answered interview questions somewhat differently than OSC personnel. To clarify this inconsistency, the Lead Assessor decides to take all the following steps EXCEPT:
정답: B
설명: (Fast2test 회원만 볼 수 있음)
The OSC prints out documents it receives via email that are marked as CUI. According to MP.L2-3.8.4:
Media Markings,
what should the Assessor expect to see on the printouts?
Media Markings,
what should the Assessor expect to see on the printouts?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
The OSC's network consists of a single unmanaged switch that connects all devices, including OT equipment which cannot run a vendor-supported operating system. The OSC correctly scoped the OT equipment as a Specialized Asset, listed it in their inventory and SSP, and provided a network diagram showing plans to isolate the OT and apply additional security measures. What information does the Lead Assessor still require to ensure compliance?
정답: B
설명: (Fast2test 회원만 볼 수 있음)