CMMC 2.0 Practices | Questions & Answers (100 %Score) Latest Updated 2024/2025
Comprehensive Questions A+ Graded Answers | 100% Pass
AC.L2-3.1.3 Control CUI Flow - ✔✔Control the flow of CUI in accordance with approved authorizations.
AC.L2-3.1.4 Separation of Duties - ✔✔Separate the duties of individuals to reduce the risk of malevolent
activity without collusion.
AC.L2-3.1.5 Least Privilege - ✔✔Employ the principle of leat privilege, including for specific security
functions and privileged accounts.
AC.L2-3.1.6 Non-Privileged Account Use - ✔✔Use non-privileged accounts or roles when accessing
nonsecurity functions.
AC.L2-3.1.7 Privileged Functions - ✔✔Prevent non-privileged users from executing privileged functions
and capture the execution of such functions in audit logs.
AC.L2-3.1.8 Unsuccessful Logon Attempts - ✔✔Limit unsuccessful logon attempts.
AC.L2-3.1.9 Privacy & Security Notices - ✔✔Provide privacy and security notices consistent with
applicable CUI rules.
AC.L2-3.1.10 Session Lock - ✔✔Use session lock with pattern-hiding displays to prevent access and
viewing of data after a period of inactivity.
AC.L2-3.1.11 Session Temination - ✔✔Terminate (automatically) a user session after a defined
condition.
AC.L2-3.1.12 Control Remote Access - ✔✔Monitor and control remote access sessions.
AC.L2-3.1.13 Remote Access Confidentiality - ✔✔Employ cryptographic mechanisms to protect the
confidentiality of remote access sessions.
Comprehensive Questions A+ Graded Answers | 100% Pass
AC.L2-3.1.3 Control CUI Flow - ✔✔Control the flow of CUI in accordance with approved authorizations.
AC.L2-3.1.4 Separation of Duties - ✔✔Separate the duties of individuals to reduce the risk of malevolent
activity without collusion.
AC.L2-3.1.5 Least Privilege - ✔✔Employ the principle of leat privilege, including for specific security
functions and privileged accounts.
AC.L2-3.1.6 Non-Privileged Account Use - ✔✔Use non-privileged accounts or roles when accessing
nonsecurity functions.
AC.L2-3.1.7 Privileged Functions - ✔✔Prevent non-privileged users from executing privileged functions
and capture the execution of such functions in audit logs.
AC.L2-3.1.8 Unsuccessful Logon Attempts - ✔✔Limit unsuccessful logon attempts.
AC.L2-3.1.9 Privacy & Security Notices - ✔✔Provide privacy and security notices consistent with
applicable CUI rules.
AC.L2-3.1.10 Session Lock - ✔✔Use session lock with pattern-hiding displays to prevent access and
viewing of data after a period of inactivity.
AC.L2-3.1.11 Session Temination - ✔✔Terminate (automatically) a user session after a defined
condition.
AC.L2-3.1.12 Control Remote Access - ✔✔Monitor and control remote access sessions.
AC.L2-3.1.13 Remote Access Confidentiality - ✔✔Employ cryptographic mechanisms to protect the
confidentiality of remote access sessions.
