Which standard and regulation requirements are the CMMC Model 2.0 based on?

1. A. NIST SP 800-171 and NIST SP 800-172
2. B. DFARS, FIPS 100, and NIST SP 800-171
3. C. DFARS, NIST, and Carnegie Mellon University
4. D. DFARS, FIPS 100, NIST SP 800-171, and Carnegie Mellon University

Correct Answer: A

Within how many days from the Assessment Final Recommended Findings Brief should the Lead Assessor and Assessment Team Members, if necessary, review the accuracy and validity of (he OSC's updated POA&M with any accompanying evidence or scheduled collections?

1. A. 90 days
2. B. 180 days
3. C. 270 days
4. D. 360 days

Correct Answer: B

Which example represents a Specialized Asset?

1. A. SOCs
2. B. Hosted VPN services
3. C. Consultants who provide cybersecurity services
4. D. All property owned or leased by the government

Correct Answer: D

An assessor has been working with an OSC's point of contact to plan and prepare for their upcoming assessment. What is one of the MOST important things to remember when analyzing requirements for an assessment?

1. A. Scoping an assessment is easy and worry-free.
2. B. The initial plan cannot be changed once agreed upon.
3. C. There is a determined amount of time that the OSC's point of contact has to submit evidence and rough order-of-magnitude.
4. D. Assessors need to continuously review and update the requirements and plan for the assessment as information is gathered.

Correct Answer: D

Which MINIMUM Level of certification must a contractor successfully achieve to receive a contract award requiring the handling of CUI?

1. A. Level 1
2. B. Level 2
3. C. Level 3
4. D. Any level

Correct Answer: B