What is a PRIMARY activity that is performed while conducting an assessment?

1. A. Develop assessment plan.
2. B. Collect and examine evidence.
3. C. Verify readiness to conduct assessment.
4. D. Deliver recommended assessment results.

Correct Answer: B

Recording evidence as adequate is defined as the criteria needed to:

1. A. verify, based on an assessment and organizational scope.
2. B. verify, based on an assessment and organizational practice.
3. C. determine if a given artifact, interview response, demonstration, or test meets the CMMC scope.
4. D. determine if a given artifact, interview response, demonstration, or test meets the CMMC practice.

Correct Answer: D

A C3PAO Assessment Plan document captures the names of the interviewees, the facilities that will utilized, along with estimated costs and schedule of the assessment. What part of the assessment plan is this?

1. A. Identify resources and schedule.
2. B. Select Assessment Team members.
3. C. Identify and manage assessment risks.
4. D. Select and develop the evidence collection approach.

Correct Answer: A

Which term describes the prevention of damage to. protection of, and restoration of computers and electronic communications systems/services, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and nonrepudiation?

1. A. Cybersecurity
2. B. Data security
3. C. Network security
4. D. Information security

Correct Answer: A

According to DFARS clause 252.204-7012, who is responsible for determining that Information in a given category should be considered CUI?

1. A. The NARA CUI Executive Agent
2. B. The contractor who generated the information
3. C. The DoD agency for whom the contractor is performing the work
4. D. The military personnel assigned to the contractor for that purpose

Correct Answer: C