CMMC-CCP問題集、Cyber AB実際の試験問題

質問 1

A server is used to store FCI with a cloud provider long-term. What is the server considered?

A. In scope, because the cloud provider will be storing the FCI data

B. Out of scope, because the cloud provider stores the FCI data long-term

C. In scope, because the cloud provider is required to be CMMC Level 2 certified

D. Out of scope, because encryption is always used when the cloud provider stores the FCI data

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 2

What is the primary intent of the verify evidence and record gaps activity?

A. Determine the one-to-one relationship between a practice and an assessment object.

B. Conduct interviews to test process implementation knowledge.

C. Identify and describe differences between what the Assessment Team required and the evidence collected.

D. Map test and demonstration responses to CMMC practices.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

For the purpose of determining scope, what needs to be included as part of the assessment but would NOT receive a CMMC certification unless an enterprise assessment is conducted?

A. ESP

B. Test equipment

C. Government property

D. People

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which term describes the prevention of damage to. protection of, and restoration of computers and electronic communications systems/services, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and nonrepudiation?

A. Data security

B. Information security

C. Network security

D. Cybersecurity

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

When scoping a Level 2 assessment, which document is useful for understanding the process to successfully implement practices required for the various Levels of CMMC?

A. NISTSP 800-53

B. NISTSP 800-171

C. NISTSP 800-88

D. NISTSP 800-172

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 6

What is the MOST common purpose of assessment procedures?

A. Define level of effort.

B. Determine information flow.

C. Obtain evidence.

D. Determine value of hardware and software.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 7

Who is the FedRAMP certification program for?

A. Cloud service providers for cloud products and services

B. Cloud service providers for on-premise products and services

C. IT contractors for cybersecurity self-assessments

D. IT contractors risk management self-assessments

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 8

Which are guiding principles in the CMMC Code of Professional Conduct?

A. Proper use of methods, higher accountability, and information integrity

B. Objectivity, information integrity, and higher accountability

C. Objectivity, information integrity, and proper use of methods

D. Proper use of methods, higher accountability, and objectivity

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 9

What is a conflict of interest?

A. Any violation of the law.

B. Any inadvertent disclosure.

C. Lack of transparency.

D. A perceived or actual conflict.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 10

Which statement is NOT a requirement for a Licensed Partner Publisher?

A. Must be approved by CMMC-AB or authorized organization

B. Must receive CMMC Level 3 certification

C. Must have at least two years of history in publishing

D. Must possess a Dun and Bradstreet number and background check

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 11

The director of sales, in a meeting, stated that the sales team received feedback on some emails that were sent, stating that the emails were not marked correctly. Which training should the director of sales refer the sales team to regarding information as to how to mark emails?

A. NARA CUI Introduction to Marking

B. C3PAO CUI Introduction to Marking

C. CMMC-AB CUI Introduction to Marking

D. FBI CUI Introduction to Marking

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 12

Prior to initiating an OSC ' s CMMC Assessment, the Lead Assessor briefed the team on the most important requirements of the assessment. The assessor also insisted that the same results of the findings summary, practice ratings, and Level recommendations must be submitted to the C3PAO for initial processes and review. After several weeks of assessment, the C3PAO completes the internal review, the recommended results are then submitted through the C3PAO for final quality review and rating approval. Which document stipulates these reporting requirements?

A. DFARS 52.204-21 assessment reporting requirements

B. NISTSP 800-171 Revision 2 assessment reporting requirements

C. DFARS clause 252.204-7012 assessment reporting requirements

D. CMMC Assessment reporting requirements

正解: D

解説: (PassTest メンバーにのみ表示されます)

Cyber AB Certified CMMC Professional (CCP) - CMMC-CCP 模擬練習