CCA CMMC Framework & Domains 2

Question 1

How many domains are defined in CMMC 2.0?

Accepted Answer

14

Answer

CMMC 2.0 organizes cybersecurity requirements into 14 domains inherited from NIST SP 800-171.

Question 2

Which CMMC 2.0 level requires a third-party assessment by a C3PAO?

Accepted Answer

Level 2 (for prioritized acquisitions)

Answer

Level 2 prioritized acquisitions require a triennial assessment by a CMMC Third-Party Assessment Organization (C3PAO).

Question 3

The CMMC domain 'Incident Response' (IR) primarily maps to which NIST SP 800-171 family?

Accepted Answer

IR — Incident Response

Answer

The CMMC Incident Response domain directly maps to the IR family in NIST SP 800-171.

Question 4

In CMMC 2.0, which level specifically protects Controlled Unclassified Information (CUI) in non-critical programs?

Accepted Answer

Level 2

Answer

CMMC Level 2 is designed to protect CUI in non-critical national security programs.

Question 5

Which of the following is NOT one of the CMMC 2.0 domains?

Accepted Answer

Privacy Engineering (PR)

Answer

Privacy Engineering is not a CMMC 2.0 domain; the 14 domains are inherited from NIST SP 800-171 and related standards.

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test