a. FAR implements and supplements the DFARS and defines additional requirements for safeguarding
b. DFARS implements and supplements FAR, which is the primary set of rules in the FAR framework.
c. Far and DFARS are unified cybersecurity standards used by all nonfederal systems and organizations
that store FCI and CUI - ✔✔B
Which document describes the procedures used to asses the maturity level of the processes and
practices of the CMMC?
a. CMMC Assessment Guide Level 3
b. CMMC Assessment Methodology
c. CMMC model - ✔✔B
Amy is a CMMC-AB Certified professional that has participated in three ML-2 assessments this year.
During The assessment, Amy supervised one of the new Certified Assessors (CA). How do you describe
this situation?
a) Acceptable, a CP is a prerequisite for the CA credential, so supervising other CA is allowed
b) Unacceptable, a CP is neither authorized to participate in ML-2 assessments not supervise other
assessment team members.
c) Unacceptable, a CP is only authorized to participate as an assessment team member under
supervision of the of a CA - ✔✔C
ASO is an American Company that supplies communications, intelligence and surveillance systems to the
department of defense. They have implemented all CMMC Level 3 requirements. Who do ASO need to
contact to issue an assessment request?
a) An organization seeking certification (OSC)
b) A third part assessor (C3PAO)
c) A registered provider organization - ✔✔B
To whom should the assessment results be submitted after conducting a CMMC level 4 Assessment?
, a) Certified Quality Auditors
b) Licensed Partner Publishers
c) Certified Instructors - ✔✔A
What is the role of Licensed Training providers LTP in the CMMC-AB ecosystem?
a) Deliver the CMMC-AB training to participants through certified instructors.
b) Develop the CMMC-AB training courses and certification exams
c) Offer consultancy services doe assessment preparation through certified assessors. - ✔✔A
How should GCraft Inc's processes be if the company wants to implement CMMC level 3?
a) Reviewed
b) Managed
c) Optimizing - ✔✔B
What type of information is not addressed in CMMC levels?
a) Classified Information
b) Unclassified Information
Federal Contract Information - ✔✔A
Company A is a federal agency that handles its critical energy infrastructure information, including
banner format and mailing based on the:
a) CMMC model
b) CUI registry
c) NIST SP 800-171 - ✔✔B
Educavo is an accredited Licensed Training Provider (LTP) that delivers training services through CMMC-
AB certified individuals. The same individuals also participate in certified assessment teams. Which
practice of the CMMC-AB Code of Professional Conduct (CoPC) is violated here?
a) Professionalism
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller VasilyKichigin. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.48. You're not tied to anything after your purchase.
