Exam CMMC-CCA Topic 2 Question 71 Discussion
Actual exam question for Cyber AB's CMMC-CCA exam
Question #: 71
Topic #: 2
Question #: 71
Topic #: 2
During a CMMC assessment, an OSC employee tells the CCA that they don't follow a documented procedure because "it's outdated," but they have an informal process that works better. The informal process appears to meet the practice's objectives. How should the CCA proceed?
Suggested Answer: B Vote an answer
Comprehensive and Detailed in Depth Explanation:
The CAP requires documenting discrepancies between documented and actual processes as evidence gaps and assessing all evidence (Option B). Option A ignores documentation, Option C is premature, and Option D is consulting, which is not allowed.
Extract from Official Document (CAP v1.0):
* Section 2.2 - Conduct Assessment (pg. 25):"Document discrepancies between documented procedures and actual processes as evidence gaps and assess based on all findings." References:
CMMC Assessment Process (CAP) v1.0, Section 2.2.
The CAP requires documenting discrepancies between documented and actual processes as evidence gaps and assessing all evidence (Option B). Option A ignores documentation, Option C is premature, and Option D is consulting, which is not allowed.
Extract from Official Document (CAP v1.0):
* Section 2.2 - Conduct Assessment (pg. 25):"Document discrepancies between documented procedures and actual processes as evidence gaps and assess based on all findings." References:
CMMC Assessment Process (CAP) v1.0, Section 2.2.
by Monroe at Sep 24, 2026, 02:46 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).