Free CMMC-CCP Exam Dumps

Question 36

When scoping the organizational system, the scope of applicability for the cybersecurity CUI practices applies to the components of:

A. federal systems that process, store, or transmit CUI.
B. nonfederal systems that process, store, or transmit CUI.
C. federal systems that process, store, or transmit CU
D. or that provide protection for the system components.
E. nonfederal systems that process, store, or transmit CU
F. or that provide protection for the system components.

Correct Answer:D

Question 37

Which MINIMUM Level of certification must a contractor successfully achieve to receive a contract award requiring the handling of CUI?

A. Level 1
B. Level 2
C. Level 3
D. Any level

Correct Answer:B

Question 38

An organization's sales representative is tasked with entering FCI data into various fields within a spreadsheet on a company-issued laptop. This laptop is an FCI Asset being used to:

A. process and transmit FCI.
B. process and organize FCI.
C. store, process, and transmit FCI.
D. store, process, and organize FCI.

Correct Answer:C

Question 39

Which NIST SP defines the Assessment Procedure leveraged by the CMMC?

A. NIST SP 800-53
B. NISTSP800-53a
C. NIST SP 800-171
D. NISTSP800-171a

Correct Answer:D

Question 40

In the Code of Professional Conduct, what does the practice of Professionalism require?

A. Do not copy materials without permission to do so.
B. Do not make assertions about assessment outcomes.
C. Refrain from dishonesty in all dealings regarding CMMC.
D. Ensure the security of all information discovered or received.

Correct Answer:C