Certified CMMC Professional (CCP) | Questions & Answers (100 %Score) Latest Updated
2024/2025 Comprehensive Questions A+ Graded Answers | 100% Pass
Which of the following is NOT a function of the CMMC Accreditation Body (AB)? - ✔✔Perform
assessments or consulting to Organizations Seeking Certification (OSC)
Which of the following is required to become a CMMC Certified Instructor who teaches CMMC Certified
Assessor (CCA) courses? - ✔✔DoD Tier 3 background check
What is the FIRST action you should take if you witness a Code of Professional Conduct (COPC) violation?
- ✔✔Privately request clarification or offer help to the violator
According to the CMMC AB, which of the following should you NOT do when using methods properly? -
✔✔Make assertions about exam outcomes or assessments
Other than safeguarding CDI, which of the following is NOT a requirement of DFARS 252.204-7012? -
✔✔Submit a compliance score to the SPRS
With respect to FEDRAMP, what does CIS stand for? - ✔✔Control Implementation Summary (CIS)
Which of the following is a CORRECT definition of Controlled Unclassified Information (CUI)? -
✔✔Information that the Government creates or possesses, or that an entity creates or possesses for or
on behalf of the Government, that a law, regulation, or Government-wide policy requires or permits an
agency to handle using safeguarding or dissemination controls.
What part of Title 32 CFR provides context for safeguarding CUI? - ✔✔2002
Which of the following is NOT an appendix to the CMMC Model Overview? - ✔✔Glossary
Which of the following control framework is NOT included in the CMMC Model's Appendix B - Source
Mapping? - ✔✔PCI DSS
, What prompted the creation of the CUI program? - ✔✔Executive Order 13556
Which resource/ruling provides and defines the basic 15 controls that make up the 17 CMMC Level 1
practices? - ✔✔FAR 52.204-21
What function does DODI 5200.48 and Part 2002 of Title 32 CFR serve? - ✔✔Provides contractors and
authorized holders responsibilities in handling CUI
What is a government authority for identifying and marking CUI? - ✔✔National Archives and Records
Administration (NARA)
Which of the following is a type of CUI? - ✔✔Basic
When analyzing CMMC practices, which of the following is an acceptable way to mark the status of an
assessment objective? - ✔✔Not-applicable
During the pre-assessment phase, where is pre-assessment information uploaded to by the CMMC
Quality Assurance Professional (CQAP)? - ✔✔eMASS
Using the DOD Assessment Methodology (DODAM), how many points are deducted for security
requirements that could lead to significant exploitation of the network, or exfiltration of DoD CUI that
are not met? - ✔✔5
How many practices must be met to move the OSC to the POA&M Close-Out Assessment option? -
✔✔88
The Assessment package must be submitted to the CQAP NLT __ Business Days from the Final Findings
Briefing and uploaded to eMASS NLT __ Business Days from the Final Findings Briefing. - ✔✔10, 20
During the planning phase of an assessment, you have finished organizing and preparing assessment
documents and templates. Which of the following would be the next step? - ✔✔Ascertain assessment
conditions and requirements
2024/2025 Comprehensive Questions A+ Graded Answers | 100% Pass
Which of the following is NOT a function of the CMMC Accreditation Body (AB)? - ✔✔Perform
assessments or consulting to Organizations Seeking Certification (OSC)
Which of the following is required to become a CMMC Certified Instructor who teaches CMMC Certified
Assessor (CCA) courses? - ✔✔DoD Tier 3 background check
What is the FIRST action you should take if you witness a Code of Professional Conduct (COPC) violation?
- ✔✔Privately request clarification or offer help to the violator
According to the CMMC AB, which of the following should you NOT do when using methods properly? -
✔✔Make assertions about exam outcomes or assessments
Other than safeguarding CDI, which of the following is NOT a requirement of DFARS 252.204-7012? -
✔✔Submit a compliance score to the SPRS
With respect to FEDRAMP, what does CIS stand for? - ✔✔Control Implementation Summary (CIS)
Which of the following is a CORRECT definition of Controlled Unclassified Information (CUI)? -
✔✔Information that the Government creates or possesses, or that an entity creates or possesses for or
on behalf of the Government, that a law, regulation, or Government-wide policy requires or permits an
agency to handle using safeguarding or dissemination controls.
What part of Title 32 CFR provides context for safeguarding CUI? - ✔✔2002
Which of the following is NOT an appendix to the CMMC Model Overview? - ✔✔Glossary
Which of the following control framework is NOT included in the CMMC Model's Appendix B - Source
Mapping? - ✔✔PCI DSS
, What prompted the creation of the CUI program? - ✔✔Executive Order 13556
Which resource/ruling provides and defines the basic 15 controls that make up the 17 CMMC Level 1
practices? - ✔✔FAR 52.204-21
What function does DODI 5200.48 and Part 2002 of Title 32 CFR serve? - ✔✔Provides contractors and
authorized holders responsibilities in handling CUI
What is a government authority for identifying and marking CUI? - ✔✔National Archives and Records
Administration (NARA)
Which of the following is a type of CUI? - ✔✔Basic
When analyzing CMMC practices, which of the following is an acceptable way to mark the status of an
assessment objective? - ✔✔Not-applicable
During the pre-assessment phase, where is pre-assessment information uploaded to by the CMMC
Quality Assurance Professional (CQAP)? - ✔✔eMASS
Using the DOD Assessment Methodology (DODAM), how many points are deducted for security
requirements that could lead to significant exploitation of the network, or exfiltration of DoD CUI that
are not met? - ✔✔5
How many practices must be met to move the OSC to the POA&M Close-Out Assessment option? -
✔✔88
The Assessment package must be submitted to the CQAP NLT __ Business Days from the Final Findings
Briefing and uploaded to eMASS NLT __ Business Days from the Final Findings Briefing. - ✔✔10, 20
During the planning phase of an assessment, you have finished organizing and preparing assessment
documents and templates. Which of the following would be the next step? - ✔✔Ascertain assessment
conditions and requirements
