When are data and documents with legacy markings from or for the DoD required to be re- marked or redacted?

1. A. When under the control of the DoD
2. B. When the document is considered secret
3. C. When a document is being shared outside of the organization
4. D. When a derivative document's original information is not CUI

Correct Answer: C

A CCP is providing consulting services to a company who is an OSC. The CCP is preparing the OSC for a CMMC Level 2 assessment. The company has asked the CCP who is responsible for determining the CMMC Assessment Scope and who validates its CMMC Assessment Scope. How should the CCP respond?

1. A. "The OSC determines the CMMC Assessment Scope, and the CCP validates the CMMC Assessment Scope."
2. B. "The OSC determines the CMMC Assessment Scope, and the C3PAO validates the CMMC Assessment Scope."
3. C. "The CMMC Lead Assessor determines the CMMC Assessment Scope, and the OSC validates the CMMC Assessment Scope."
4. D. "The CMMC C3PAO determines the CMMC Assessment Scope, and the Lead Assessor validates the CMMC Assessment Scope."

Correct Answer: B

When a conflict of interest is unavoidable, a CCP should NOT:

1. A. Inform their organization
2. B. Take action to minimize its impact
3. C. Disclose it to affected stakeholders
4. D. Conceal it from the Assessment Team lead

Correct Answer: D

Which assessment method describes the process of reviewing, inspecting, observing, studying, or analyzing assessment objects (i.e., specification, mechanisms, activities)?

1. A. Test
2. B. Assess
3. C. Examine
4. D. Interview

Correct Answer: C

In preparation for a CMMC Level 1 Self-Assessment, the IT manager for a DIB organization is documenting asset types in the company's SSP The manager determines that identified machine controllers and assembly machines should be documented as Specialized Assets. Which type of Specialized Assets has the manager identified and documented?

1. A. loT
2. B. Restricted IS
3. C. Test equipment
4. D. Operational technology

Correct Answer: D