Free CMMC-CCP Exam Dumps

Question 46

A server is used to store FCI with a cloud provider long-term. What is the server considered?

A. In scope, because the cloud provider will be storing the FCI data
B. Out of scope, because the cloud provider stores the FCI data long-term
C. In scope, because the cloud provider is required to be CMMC Level 2 certified
D. Out of scope, because encryption is always used when the cloud provider stores the FCI data

Correct Answer:A

Question 47

A defense contractor needs to share FCI with a subcontractor and sends this data in an email. The email system involved in this process is being used to:

A. manage FCI.
B. process FCI.
C. transmit FCI.
D. generate FCI

Correct Answer:C

Question 48

Which document is the BEST source for determining the sources of evidence for a given practice?

A. NISTSP 800-53
B. NISTSP 800-53A
C. CMMC Assessment Scope
D. CMMC Assessment Guide

Correct Answer:D

Question 49

Two network administrators are working together to determine a network configuration in preparation for CMMC. The administrators find that they disagree on a couple of small items. Which solution is the BEST way to ensure compliance with CMMC?

A. Consult with the CEO of the company.
B. Consult the CMMC Assessment Guides and NIST SP 800-171.
C. Go with the network administrator's ideas with the least stringent controls.
D. Go with the network administrator's ideas with the most stringent controls.

Correct Answer:B

Question 50

In scoping a CMMC Level 1 Self-Assessment, all of the computers and digital assets that handle FCI are identified. A file cabinet that contains paper FCI is also identified. What can this file cabinet BEST be determined to be?

A. In scope, because it is an asset that stores FCI
B. In scope, because it is part of the same physical location
C. Out of scope, because they are all only paper documents
D. Out of scope, because it does not process or transmit FCI

Correct Answer:A