CCA CCA Evidence Collection & Documentation 1

Question 1

What are the three primary methods of evidence collection used in CMMC assessments?

Accepted Answer

Examine, interview, and test

Answer

CMMC assessors use three methods — examine (review documents/artifacts), interview (talk to personnel), and test (observe or exercise controls) — to gather evidence for each practice.

Question 2

When a CCA assessor 'examines' evidence during a CMMC assessment, what activities does this include?

Accepted Answer

Reviewing documentation, policies, procedures, system configurations, and other artifacts

Answer

Examining involves reviewing written artifacts such as policies, procedures, system configurations, logs, and other documentation to assess whether required practices are implemented.

Question 3

What type of evidence is considered most reliable when assessing the implementation of a technical control?

Accepted Answer

System-generated logs and configuration screenshots observed directly by the assessor

Answer

Direct observation of system-generated evidence (logs, configurations) is most reliable because it provides objective, system-level proof of control implementation rather than relying on assertions.

Question 4

What is a 'finding' in the context of a CMMC assessment?

Accepted Answer

A documented determination of whether a specific practice is 'Met' or 'Not Met' based on collected evidence

Answer

A finding is the assessor's documented determination of whether an assessed practice is 'Met' or 'Not Met,' supported by the evidence collected during the assessment.

Question 5

Why is maintaining a complete evidence package critical for a CCA assessor?

Accepted Answer

To support the assessment findings, enable quality reviews, and provide a defensible record of the assessment

Answer

A complete evidence package documents the basis for every finding, enabling quality assurance reviews and providing a defensible record if findings are challenged.

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

CCA CCA Evidence Collection & Documentation 1