Certified CMMC Professional v1.0

When assessing an OSC for CMMC, the Lead Assessor should use the information from the Discussion and Further Discussion sections in each practice because it:

An OSC has requested a C3PAO to conduct a Level 2 Assessment. The C3PAO has agreed, and the two organizations have collaborated to develop the Assessment Plan. Who agrees to and signs off on the Assessment Plan?

Which regulation allows for whistleblowers to sue on behalf of the federal government?

Within how many days from the Assessment Final Recommended Findings Brief should the Lead Assessor and Assessment Team Members, if necessary, review the accuracy and validity of the OSC’s updated POA&M with any accompanying evidence or scheduled collections?

Ethics is a shared responsibility between:

Which phase of the CMMC Assessment Process includes developing the assessment plan?

During Phase 4 of the Assessment process, what MUST the Lead Assessor determine and recommend to the C3PAO concerning the OSC?

The CMMC Level 2 assessment methods include examination and can include:

Who is responsible for ensuring that subcontractors have a valid CMMC Certification?

When are data and documents with legacy markings from or for the DoD required to be re-marked or redacted?

An Assessment Team is reviewing a practice that is documented and being checked monthly. When reviewing the logs, the practice is only being completed quarterly. During the interviews, the team members say they perform the practice monthly but only document quarterly. Is this sufficient to pass the practice?

Which phase of the CMMC Assessment Process includes the task to identify, obtain inventory, and verify evidence?

What is the MOST common purpose of assessment procedures?

What are CUI protection responsibilities?