An organization's sales representative is tasked with entering FCI data into various fields within a spreadsheet on a company-issued laptop. This laptop is an FCI Asset being used to:

1. A. process and transmit FCI.
2. B. process and organize FCI.
3. C. store, process, and transmit FCI.
4. D. store, process, and organize FCI.

Correct Answer: C

Companies that knowingly defraud the government by not being in compliance with cybersecurity regulations are at risk of being held liable for:

1. A. The contract value plus a penalty as stated in the Cyber Claims Act
2. B. The contract value plus a penalty as stated in the False Claims Act
3. C. Three times the contract value plus a penalty as stated in the Cyber Claims Act
4. D. Three times the contract value plus a penalty as stated in the False Claims Act

Correct Answer: D

An OSC has submitted evidence for an upcoming assessment. The assessor reviews the evidence and determines it is not adequate or sufficient to meet the CMMC practice. What can the assessor do?

1. A. Notify the CMMC-AB.
2. B. Cancel the assessment.
3. C. Postpone the assessment.
4. D. Contact the C3PAO for guidance.

Correct Answer: D

The Assessment Team has completed Phase 2 of the Assessment Process. In conducting Phase 3 of the Assessment Process, the Assessment Team is reviewing evidence to address Limited Practice Deficiency Corrections. How should the team score practices in which the evidence shows the deficiencies have been corrected?

1. A. MET
2. B. POA&M
3. C. NOT MET
4. D. NOT APPLICABLE

Correct Answer: A

Who will verify the adequacy and sufficiency of evidence to determine whether the practices and related components for each in-scope Host Unit, Supporting Organization/Unit, or enclave have been met?

1. A. OSC
2. B. Assessment Team
3. C. Authorizing official
4. D. Assessment official

Correct Answer: B