CCA CMMC Certification Levels & Requirements 2

Question 1

What is the maximum number of days allowed to close a Plan of Action & Milestones (POA&M) item to achieve a final CMMC Level 2 certification after receiving conditional status?

Accepted Answer

180 days

Answer

90 days

Answer

120 days

Answer

365 days

Question 2

Which NIST publication provides the enhanced security requirements that underpin CMMC Level 3 (Expert)?

Accepted Answer

NIST SP 800-172

Answer

NIST SP 800-53 Rev 5

Answer

NIST SP 800-171 Rev 2

Answer

NIST SP 800-161

Question 3

How many domains are included in the CMMC 2.0 model?

Accepted Answer

14

Answer

17

Answer

20

Answer

24

Question 4

What is the primary purpose of DFARS clause 252.204-7012 in relation to cybersecurity?

Accepted Answer

To establish adequate security safeguards and mandate 72-hour cyber incident reporting for CUI

Answer

To define CMMC certification levels and timelines

Answer

To require annual self-assessments for all DoD contractors

Answer

To authorize C3PAOs to conduct CMMC assessments

Question 5

Which CMMC level specifically addresses protecting CUI against Advanced Persistent Threats (APTs)?

Accepted Answer

Level 3

Answer

Level 1

Answer

Level 2

Answer

Levels 2 and 3 equally

Question 6

What annual action is required of CMMC Level 2 contractors regardless of whether they undergo self-assessment or third-party assessment?

Accepted Answer

Senior official affirmation confirming continued compliance with cybersecurity requirements

Answer

Submission of an updated System Security Plan (SSP) to the Cyber AB

Answer

Third-party auditor sign-off on the current security posture

Answer

Contracting Officer's Representative (COR) verification of assessment results

Question 7

Under CMMC 2.0, which Level 2 contractors may be permitted to use self-assessment rather than a third-party C3PAO assessment?

Accepted Answer

Contractors on non-prioritized acquisition programs that do not involve CUI

Answer

Only contractors with fewer than 50 employees

Answer

All Level 2 contractors if they have a clean prior assessment record

Answer

Contractors that have maintained CMMC Level 1 certification for at least three years