CCA CCA Assessment Planning & Scoping 1

Question 1

What is the first step a CCA assessor must complete before beginning a CMMC Level 2 assessment?

Accepted Answer

Define the assessment scope and boundary

Answer

Defining the assessment scope and boundary is the mandatory first step to ensure all relevant systems and data are properly evaluated.

Question 2

Which document serves as the primary planning artifact for a CMMC assessment?

Accepted Answer

Assessment Plan (AP)

Answer

The Assessment Plan (AP) is the primary planning artifact that outlines the scope, objectives, schedule, and methodology for a CMMC assessment.

Question 3

When scoping a CMMC assessment, which type of data determines what systems fall within scope?

Accepted Answer

Federal Contract Information (FCI) and Controlled Unclassified Information (CUI)

Answer

FCI and CUI are the data types that determine which systems, personnel, and processes fall within the CMMC assessment scope.

Question 4

What is the purpose of a pre-assessment kickoff meeting in CMMC assessment planning?

Accepted Answer

To establish ground rules, confirm scope, and align expectations between assessors and the OSC

Answer

The kickoff meeting aligns the assessment team and the Organization Seeking Certification (OSC) on scope, logistics, and expectations before fieldwork begins.

Question 5

Which term describes the boundary within which CMMC requirements must be assessed?

Accepted Answer

Assessment boundary

Answer

The assessment boundary defines the people, technology, facilities, and external service providers that process, store, or transmit CUI/FCI within scope.

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

CCA CCA Assessment Planning & Scoping 1