Exam CMMC-CCA Topic 1 Question 134 Discussion

Actual exam question for Cyber AB's CMMC-CCA exam
Question #: 134
Topic #: 1
A small manufacturing company plans to undergo a CMMC assessment and needs to validate its scope. The company uses a cloud-based customer relationship management (CRM) system hosted by an external provider to store and process customer information, including FCI and CUI. Which of the following components should the company include in the scope of their CMMC assessment?

Suggested Answer: C Vote an answer

Comprehensive and Detailed Explanation:
The CMMC Assessment Scope - Level 2 requires inclusion of all assets processing, storing, or transmitting FCI/CUI, including those managed by ESPs like the cloud CRM provider. Both the CRM system and the ESP' s supporting systems must be in scope to ensure comprehensive protection, as they handle sensitive data.
Option A excludes critical components, Option B is incomplete, and Option D omits the CRM system itself. C is correct.
Reference:
CMMC Assessment Scope - Level 2, Section 2.3.3 (ESPs), p. 6: "ESP systems handling FCI/CUI are in scope."

by Wythe at Sep 21, 2025, 01:39 PM

Limited Time Offer

15%

Off

Get Premium CMMC-CCA Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10