Loading demo links...
Showing 1–12 of 12 questions
How many security requirement families does CMMC Level 2 draw from NIST SP 800-171?
Select an option, then click Submit answer.
What does CMMC Level 1 protect and require?
Select an option, then click Submit answer.
What standard defines CMMC Level 2 requirements?
Select an option, then click Submit answer.
How is a practice judged during evaluation?
Select an option, then click Submit answer.
What are the three evidence types used in evaluation?
Select an option, then click Submit answer.
What does a POA&M do in the CMMC model?
Select an option, then click Submit answer.
Which two are CMMC Level 2 requirement families? (Choose two.)
Select all that apply, then click Submit answer.
Which two describe how practices are evaluated? (Choose two.)
Select all that apply, then click Submit answer.
Which two documents support implementation evaluation? (Choose two.)
Select all that apply, then click Submit answer.
DRAG DROP
Match each family to its focus.
Items to match: Access Control, Incident Response, Media Protection, Audit and Accountability.
Answer is in the explanation below.
DRAG DROP
Match each model element to its meaning.
Items to match: Assessment objective, POA&M, System Security Plan, Practice determination.
Answer is in the explanation below.
CORRECT TEXT
A practice is judged ______ only when evidence satisfies all its assessment objectives.
Answer is in the explanation below.
