CCA CCA Evidence Collection & Documentation

Question 1

What are the three primary methods of evidence collection used in CMMC assessments?

Accepted Answer

Examine, interview, and test

Answer

Scanning, testing, and reporting

Answer

Review, validate, and certify

Answer

Inspect, analyze, and document

Question 2

When a CCA assessor 'examines' evidence during a CMMC assessment, what activities does this include?

Accepted Answer

Reviewing documentation, policies, procedures, system configurations, and other artifacts

Answer

Conducting hands-on penetration testing of systems

Answer

Interviewing personnel about security practices

Answer

Running automated vulnerability scans

Question 3

What type of evidence is considered most reliable when assessing the implementation of a technical control?

Accepted Answer

System-generated logs and configuration screenshots observed directly by the assessor

Answer

Verbal assertions from the CISO

Answer

Policy documents attesting to the control's existence

Answer

Employee training completion certificates

Question 4

What is a 'finding' in the context of a CMMC assessment?

Accepted Answer

A documented determination of whether a specific practice is 'Met' or 'Not Met' based on collected evidence

Answer

A billing item on the assessment invoice

Answer

A suggestion for improving cybersecurity beyond CMMC requirements

Answer

A report submitted to the contracting officer

Question 5

Why is maintaining a complete evidence package critical for a CCA assessor?

Accepted Answer

To support the assessment findings, enable quality reviews, and provide a defensible record of the assessment

Answer

To enable marketing of assessment services

Answer

To comply with HIPAA documentation requirements

Answer

To generate metrics for the CMMC-AB annual report

Question 6

Which of the following would NOT be appropriate as evidence for assessing whether multi-factor authentication (MFA) is implemented?

Accepted Answer

A signed attestation from the CISO that MFA is in place

Answer

A live demonstration of an MFA login

Answer

System configuration screenshots showing MFA settings enabled

Answer

A policy document stating MFA is required