Exam CMMC-CCA Topic 3 Question 17 Discussion
Actual exam question for Cyber AB's CMMC-CCA exam
Question #: 17
Topic #: 3
Question #: 17
Topic #: 3
Certified CMMC Assessors must follow assessment procedures when conducting CMMC assessments. These procedures include a series of steps and tools that the CCA will use in the course of their duties. Which of the following is not part of an assessment procedure?
Suggested Answer: C Vote an answer
Comprehensive and Detailed in Depth Explanation:
The CMMC Assessment Process (CAP) and NIST SP 800-171A define assessment procedures asconsisting of Assessment Methods (examine, interview, test), Assessment Objects (e.g., policies, personnel), and Assessment Objectives (specific determinations). Depth and coverage (Option C) are attributes that guide the rigor of the assessment approach but are not components of the procedure itself. They influence how methods are applied, not the procedure's structure. Options A, B, and D are explicit parts of the procedure per NIST SP
800-171A, making Option C the correct answer as it is not a direct component.
Reference Extract:
* NIST SP 800-171A, Introduction:"Assessment procedures include objectives, methods, and objects; depth and coverage are attributes applied to these."
* CMMC Assessment Process (CAP) v1.0, Section 4.1:"Procedures consist of methods, objects, and objectives."Resources:https://csrc.nist.gov/pubs/sp/800/171/a/final;https://cyberab.org/Portals/0
/Documents/Process-Documents/CMMC-Assessment-Process-CAP-v1.0.pdf
The CMMC Assessment Process (CAP) and NIST SP 800-171A define assessment procedures asconsisting of Assessment Methods (examine, interview, test), Assessment Objects (e.g., policies, personnel), and Assessment Objectives (specific determinations). Depth and coverage (Option C) are attributes that guide the rigor of the assessment approach but are not components of the procedure itself. They influence how methods are applied, not the procedure's structure. Options A, B, and D are explicit parts of the procedure per NIST SP
800-171A, making Option C the correct answer as it is not a direct component.
Reference Extract:
* NIST SP 800-171A, Introduction:"Assessment procedures include objectives, methods, and objects; depth and coverage are attributes applied to these."
* CMMC Assessment Process (CAP) v1.0, Section 4.1:"Procedures consist of methods, objects, and objectives."Resources:https://csrc.nist.gov/pubs/sp/800/171/a/final;https://cyberab.org/Portals/0
/Documents/Process-Documents/CMMC-Assessment-Process-CAP-v1.0.pdf
by Valentina at Feb 15, 2026, 02:21 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).