CCA Evaluation Methodology 2

Question 1

During a CMMC assessment, when an assessor encounters a practice that is partially implemented, which scoring outcome is most appropriate under the CMMC Level 2 methodology?

Accepted Answer

NOT MET

Answer

CMMC Level 2 uses a binary MET/NOT MET scoring — partial implementation results in NOT MET since all objectives for a practice must be satisfied.

Question 2

Which document type serves as the primary vehicle for recording assessment findings and the evidence reviewed during a CMMC assessment?

Accepted Answer

Assessment Results (AR)

Answer

The Assessment Results (AR) document captures the findings, evidence reviewed, and MET/NOT MET determinations made during the assessment.

Question 3

A C3PAO assessor is reviewing a cloud service used by the OSC. Which factor is MOST critical when evaluating whether the cloud solution supports CMMC compliance?

Accepted Answer

Whether the service has a FedRAMP authorization at the appropriate impact level

Answer

FedRAMP authorization at the appropriate impact level is the key factor because CMMC requires CUI to be processed in environments meeting equivalent federal security standards.

Question 4

Under the CMMC evaluation methodology, what is the correct sequence of assessment phases?

Accepted Answer

Initiate → Plan → Execute → Report

Answer

The CMMC assessment process follows four phases: Initiate, Plan, Execute, and Report, as defined in the CMMC Assessment Process (CAP).

Question 5

When an assessor is evaluating the 'identify' objective of a CMMC practice, what is the primary focus?

Accepted Answer

Determining whether the OSC can recognize and enumerate the relevant assets, systems, or actions

Answer

The 'identify' objective tests whether the organization can correctly recognize and enumerate what is required by the practice, such as identifying CUI or relevant system components.

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test

CCA Evaluation Methodology 2