Exam CMMC-CCA Topic 1 Question 111 Discussion

Actual exam question for Cyber AB's CMMC-CCA exam
Question #: 111
Topic #: 1

You are a CCA conducting a CMMC Level 2 assessment for an OSC. During the assessment, you discover that the OSC has implemented a practice using a temporary workaround due to a recent system failure. The workaround meets the practice's objectives, but it is not documented in their System Security Plan (SSP).
How should you evaluate this evidence?

A. Accept the workaround as sufficient evidence and score the practice as "MET" since it meets the objectives. B. Document the lack of SSP inclusion as an evidence gap and assess the practice based on the workaround's effectiveness. C. Score the practice as "NOT MET" due to the absence of documentation in the SSP. D. Request the OSC to update the SSP to include the workaround before continuing the assessment.

Suggested Answer: B Vote an answer

Comprehensive and Detailed in Depth Explanation:
The CAP requires assessors to document discrepancies, such as undocumented workarounds, as evidence gaps and assess based on all available evidence, including effectiveness (Option B). Option A overlooks documentation requirements, Option C is premature without full assessment, and Option D involves consulting, which is prohibited.
Extract from Official Document (CAP v1.0):
* Section 2.2 - Conduct Assessment (pg. 25):"Document discrepancies between implemented practices and the SSP as evidence gaps and assess based on all available evidence." References:
CMMC Assessment Process (CAP) v1.0, Section 2.2.

by Lawrence at Oct 04, 2025, 02:02 PM

Limited Time Offer

15%

Off

Get Premium CMMC-CCA Questions as Interactive Self Test Engine or PDF

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business