CCA CCA Assessment Planning & Scoping 2

Question 1

Which CMMC assessment guide provides the authoritative criteria used by C3PAOs and CCAs during assessments?

Accepted Answer

CMMC Assessment Guide Level 2

Answer

The CMMC Assessment Guide Level 2 provides the specific assessment objectives and methods that CCAs must use when evaluating OSC implementations.

Question 2

What does the term 'OSC' refer to in the context of CMMC assessments?

Accepted Answer

Organization Seeking Certification

Answer

OSC stands for Organization Seeking Certification, referring to the defense contractor undergoing the CMMC assessment.

Question 3

During assessment scoping, what role does the System Security Plan (SSP) play?

Accepted Answer

It provides a description of the system boundary, components, and implemented security controls

Answer

The SSP describes the system boundary and how security controls are implemented, serving as a critical reference document for scoping and evaluating the assessment.

Question 4

What is the minimum number of assessors required for a CMMC Level 2 certification assessment conducted by a C3PAO?

Accepted Answer

A team of at least two CCAs

Answer

CMMC Level 2 certification assessments require a team of at least two CCAs to ensure objectivity and thoroughness.

Question 5

What is a 'gap analysis' in the context of CMMC assessment planning?

Accepted Answer

A pre-assessment review identifying where an OSC does not yet meet CMMC requirements

Answer

A gap analysis is a pre-assessment activity that identifies where the OSC's current security posture falls short of CMMC requirements, allowing remediation before the formal assessment.

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

CCA CCA Assessment Planning & Scoping 2