During a CMMC assessment, the OSC provides a policy document that is signed by a manager who left the company six months ago. The OSC insists the policy is still enforced, and staff interviews confirm its use. How should the Lead Assessor proceed?
Answer(s): B
Comprehensive and Detailed in DepthThe CAP requires noting deficiencies like an outdated signature as an evidence gap while assessing all evidence, including interviews (Option B). Option A ignores the gap, Option C is premature, and Option D involves consulting, which is not allowed.Extract from Official Document (CAP v1.0):Section 2.2 Conduct Assessment (pg. 25):"Document deficiencies such as outdated signatures as evidence gaps and assess based on implementation evidence."
CMMC Assessment Process (CAP) v1.0, Section 2.2.
The Cyber AB has completed an investigation into a report submitted by a CCA regarding a potential violation by another CCA. They have determined that the violation falls within the scope of the relevant Industry Working Group's authority. What is the likely course of action for the Cyber AB in this scenario?
Comprehensive and Detailed in DepthThe CoPC delegates certain violations to Industry Working Groups, with Cyber AB referring them for resolution. Option A (continuing) oversteps this delegation. Option C (suspension) is premature. Option D (dismissing) ignores process. Option B is correct.Extract from Official Document (CoPC):Paragraph 4.1(4)(a) Violation Resolution (pg. 10):"Refer incidents to the relevant Industry Working Group for resolution, which may include remediation or termination, with a right of appeal."
CMMC Code of Professional Conduct, Paragraph 4.1(4)(a).
A CCA is conducting a CMMC assessment and notices that the OSC's evidence includes screenshots of system configurations that are not dated. The OSC claims the screenshots are current. How should the CCA proceed?
Comprehensive and Detailed in DepthThe CAP requires verifying evidence currency, documenting gaps like undated screenshots (Option B). Options A, C, and D misapply CAP evidence rules.Extract from Official Document (CAP v1.0):Section 2.2 Conduct Assessment (pg. 25):"Document lack of evidence verification, such as dates, as gaps and request additional verification."
You are the Lead Assessor for a C3PAO Assessment Team that has recently completed a CMMC Level 2 assessment for an OSC. You and your Assessment Team have finalized the assessment process and are now in Phase 3 Report Recommended Assessment Results. You are preparing to deliver the final recommended findings to the OSC Assessment Official and OSC participants during the Final Findings Briefing. After you present the final recommended findings and practice scores, what is the next step in the CMMC Assessment Process?
Answer(s): A
Comprehensive and Detailed in DepthThe CAP requires a CQAP quality review before eMASS submission (Option A), not immediate submission (Option C), appeals (Option B, optional), or archiving (Option D, later step).Extract from Official Document (CAP v1.0):Section 3.2 Report Assessment Results (pg. 32):"The C3PAO CQAP conducts an internal quality review of the Assessment Results Package post-Final Findings Briefing."
CMMC Assessment Process (CAP) v1.0, Section 3.2.
You are the Lead Assessor for a C3PAO Assessment Team that has recently completed a CMMC Level 2 assessment for an OSC. You and your Assessment Team have finalized the assessment process and are now in Phase 3 Report Recommended Assessment Results. You are preparing to deliver the final recommended findings to the OSC Assessment Official and OSC participants during the Final Findings Briefing. In addition to presenting the Final Recommended Findings, what other information must you include during the Final Findings Briefing?
Answer(s): D
Comprehensive and Detailed in DepthThe CAP requires the Final Findings Briefing to include detailed practice scores with traceability, beyond just findings (Option A), records (Option B), or pre-assessment data (Option C). Option D is the full requirement.Extract from Official Document (CAP v1.0):Section 3.2 Final Findings Briefing (pg. 32):"Present the details of the CMMC practice scores, including clear traceability from each finding, score, and practice MET/NOT MET status."
Post your Comments and Discuss Cyber AB CMMC-CCA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CMMC-CCA content, but please register or login to continue.