CCA Cybersecurity Practices & Controls 4

Question 1

Which CMMC practice requires that system security plans (SSPs) be developed, documented, and periodically updated?

Accepted Answer

CA.L2-3.12.4

Answer

CA.L2-3.12.4 specifically requires development, documentation, and periodic updating of system security plans for organizational systems.

Question 2

What is the key distinction between a Plan of Action and Milestones (POA&M) and a System Security Plan (SSP) in the context of CMMC?

Accepted Answer

An SSP documents the current security posture while a POA&M documents gaps and remediation timelines

Answer

The SSP describes the current state of security controls, while the POA&M identifies gaps and establishes timelines to remediate them.

Question 3

A CCA assessor is evaluating an organization's use of mobile devices. Which practice requires the organization to sanitize or destroy media before disposal or reuse?

Accepted Answer

MP.L2-3.8.3 — Sanitize or destroy system media before disposal or reuse

Answer

MP.L2-3.8.3 requires that system media be sanitized or destroyed before disposal or reuse to prevent unauthorized disclosure of CUI.

Question 4

Which CMMC practice addresses the requirement to control and monitor user-installed software?

Accepted Answer

CM.L2-3.4.8 — Apply deny-by-exception policy to prevent use of unauthorized software

Answer

CM.L2-3.4.8 requires a deny-by-exception (blacklisting or whitelisting) policy to prevent or restrict installation of unauthorized software.

Question 5

Under CMMC, what does the practice IA.L2-3.5.3 specifically require?

Accepted Answer

Employ replay-resistant authentication mechanisms for network access

Answer

IA.L2-3.5.3 requires employing replay-resistant authentication mechanisms, such as session identifiers or one-time passwords, for network access.

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

CCA Cybersecurity Practices & Controls 4