A contractor provides services and data to the DoD. The transactions that occur to handle FCI take place over the contractor's business network, but the work is performed on contractor-owned systems, which must be configured based on government requirements and are used to support a contract. What type of Specialized Asset are these systems?

1. A. loT
2. B. Restricted IS
3. C. Test equipment
4. D. Government property

Correct Answer: B

Validation of findings is an iterative process usually performed during the Daily Checkpoints throughout the entire assessment process. As a validation activity, why are the preliminary findings important?

1. A. It allows the OSC to comment and provide additional evidence.
2. B. It determines whether the OSC will be rated MET or NOT MET on their assessment.
3. C. It confirms that the Assessment Team's findings are right and cannot be changed.
4. D. It corroborates the Assessment Team's understanding of the CMMC practices and controls.

Correct Answer: A

A Lead Assessor is performing a CMMC readiness review. The Lead Assessor has already recorded the assessment risk status and the overall assessment feasibility. At MINIMUM, what remaining readiness review criteria should be verified?

1. A. Determine the practice pass/fail results.
2. B. Determine the preliminary recommended findings.
3. C. Determine the initial model practice ratings and record them.
4. D. Determine the logistic
5. E. Assessment Team, and the evidence readiness.

Correct Answer: D

In performing scoping, what should the assessor ensure that the scope of the assessment covers?

1. A. All assets documented in the business plan
2. B. All assets regardless if they do or do not process, store, or transmit FCI/CUI
3. C. All entities, regardless of the line of business, associated with the organization
4. D. All assets processing, storing, or transmitting FCI/CUI and security protection assets

Correct Answer: D

Which standard of assessment do all C3PAO organizations execute an assessment methodology based on?

1. A. ISO 27001
2. B. NISTSP800-53A
3. C. CMMC Assessment Process
4. D. Government Accountability Office Yellow Book

Correct Answer: C