Exam CMMC-CCA Topic 3 Question 47 Discussion
Actual exam question for Cyber AB's CMMC-CCA exam
Question #: 47
Topic #: 3
Question #: 47
Topic #: 3
An OSC has two business locations. At each location, the OSC has a wireless guest network to which non- OSC employees are allowed access. The guest network is not password protected and it connects devices within the local OSC's LAN. Based on this information, does the OSC meet the requirements of Level 2 for network access restriction?
Suggested Answer: B Vote an answer
CMMC Level 2 requires that network access to CUI systems be restricted to authorized users and devices
. A guest network without password protection that connects directly into the LAN violates AC.L2-3.1.3 (Access Enforcement) and SC.L2-3.13.16 (Cryptographic protection) because unauthorized users may access OSC systems and CUI indirectly.
Exact Extracts:
* AC.L2-3.1.3: "Control the flow of CUI by enforcing access restrictions."
* SC.L2-3.13.16: "Employ cryptographic mechanisms to protect confidentiality of CUI during transmission."
* Assessment Guide: "Guest wireless networks must be segmented and controlled to prevent unauthorized access to internal networks containing CUI." Why other options are not correct:
* A: Additional assessment is irrelevant - issue is failure to meet requirements.
* C/D: False - requirements clearly exist, and the OSC's current setup fails them.
References:
CMMC Assessment Guide - Level 2, Version 2.13: AC and SC practices on access restrictions and secure wireless.
NIST SP 800-171A: Assessment procedures for access enforcement and wireless protections.
. A guest network without password protection that connects directly into the LAN violates AC.L2-3.1.3 (Access Enforcement) and SC.L2-3.13.16 (Cryptographic protection) because unauthorized users may access OSC systems and CUI indirectly.
Exact Extracts:
* AC.L2-3.1.3: "Control the flow of CUI by enforcing access restrictions."
* SC.L2-3.13.16: "Employ cryptographic mechanisms to protect confidentiality of CUI during transmission."
* Assessment Guide: "Guest wireless networks must be segmented and controlled to prevent unauthorized access to internal networks containing CUI." Why other options are not correct:
* A: Additional assessment is irrelevant - issue is failure to meet requirements.
* C/D: False - requirements clearly exist, and the OSC's current setup fails them.
References:
CMMC Assessment Guide - Level 2, Version 2.13: AC and SC practices on access restrictions and secure wireless.
NIST SP 800-171A: Assessment procedures for access enforcement and wireless protections.
by Clark at Feb 10, 2026, 05:38 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).