There are 15 practices that are NOT MET for an OSC ' s Level 2 Assessment. All practices are applicable to the OSC. Which determination should be reached?
A. The OSC is not eligible for an option to remediate after the assessment is canceled.
B. The OSC may have 90 days for remediating NOT MET practices.
C. The OSC is not eligible for an option to remediate NOT MET practices.
D. The OSC may be eligible for an option to remediate NOT MET practices.
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
Which entity specifies the required CMMC Level in Requests for Information and Requests for Proposals?
A. Department of Homeland Security
B. NIST
C. NARA
D. DoD
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 3:
Which standard and regulation requirements are the CMMC Model 2.0 based on?
A. DFARS, FIPS 100, NIST SP 800-171, and Carnegie Mellon University
B. DFARS, FIPS 100, and NIST SP 800-171
C. NIST SP 800-171 and NIST SP 800-172
D. DFARS, NIST, and Carnegie Mellon University
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
Which statement is NOT a requirement for a Licensed Partner Publisher?
A. Must have at least two years of history in publishing
B. Must possess a Dun and Bradstreet number and background check
C. Must receive CMMC Level 3 certification
D. Must be approved by CMMC-AB or authorized organization
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
The Level 1 practice description in CMMC is Foundational. What is the Level 2 practice description?
A. Advanced
B. Optimizing
C. Expert
D. Continuously Improved
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 6:
When assessing SI.L1-3.14.2: Provide protection from malicious code at appropriate locations within organizational information systems, evidence shows that all of the OSC ' s workstations and servers have antivirus software installed for malicious code protection. A centralized console for the antivirus software management is in place and records show that all devices have received the most updated antivirus patterns.
What is the BEST determination that the Lead Assessor should reach regarding the evidence?
A. It is insufficient, and the audit finding can be rated NOT MET.
B. It is insufficient, and the Lead Assessor should seek more evidence.
C. It is sufficient, and the audit finding can be rated as MET.
D. It is sufficient, and the Lead Assessor should seek more evidence.
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
質問 7:
According to DFARS clause 252.204-7012, who is responsible for determining that Information in a given category should be considered CUI?
A. The contractor who generated the information
B. The NARA CUI Executive Agent
C. The military personnel assigned to the contractor for that purpose
D. The DoD agency for whom the contractor is performing the work
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
926 お客様のコメント





中村** -
約一週間ぐらいでCMMC-CCP学習教材を利用し、CMMC-CCP試験をパスしました!役に立ちました!お勧めします。