Exam CMMC-CCP Topic 1 Question 60 Discussion
Actual exam question for Cyber AB's CMMC-CCP exam
Question #: 60
Topic #: 1
Question #: 60
Topic #: 1
What are CUI protection responsibilities?
Suggested Answer: D Vote an answer
Understanding CUI Protection ResponsibilitiesControlled Unclassified Information (CUI)is sensitive butnot classifiedinformation that requires protection underDoD Instruction 5200.48andDFARS 252.204-7012.
Theprimary responsibilityfor handling CUIis safeguardingit against unauthorized access, disclosure, or modification.
* TheCUI Program (as per NARA and DoD)mandatessafeguarding measuresto protectCUI in both digital and physical forms.
* CMMC 2.0 Level 2 (Advanced) practices align with NIST SP 800-171, which focuses on safeguarding CUIthrough access controls, encryption, and monitoring.
* DFARS 252.204-7012requires DoD contractors to implementcybersecurity safeguardsto protect CUI.
* A. Shielding (Incorrect)-Shieldingis not a cybersecurity term associated with CUI protection.
* B. Governing (Incorrect)-Governing refers to policy-making, not direct protection.
* C. Correcting (Incorrect)-Correcting implies remediation, but the primary responsibility is tosafeguardCUI proactively.
* The correct answer isD. Safeguarding, asCUI protection focuses on implementing cybersecurity safeguards.
References:
DoD Instruction 5200.48 (CUI Program)
DFARS 252.204-7012
CMMC 2.0 Level 2 Practices (NIST SP 800-171)
Theprimary responsibilityfor handling CUIis safeguardingit against unauthorized access, disclosure, or modification.
* TheCUI Program (as per NARA and DoD)mandatessafeguarding measuresto protectCUI in both digital and physical forms.
* CMMC 2.0 Level 2 (Advanced) practices align with NIST SP 800-171, which focuses on safeguarding CUIthrough access controls, encryption, and monitoring.
* DFARS 252.204-7012requires DoD contractors to implementcybersecurity safeguardsto protect CUI.
* A. Shielding (Incorrect)-Shieldingis not a cybersecurity term associated with CUI protection.
* B. Governing (Incorrect)-Governing refers to policy-making, not direct protection.
* C. Correcting (Incorrect)-Correcting implies remediation, but the primary responsibility is tosafeguardCUI proactively.
* The correct answer isD. Safeguarding, asCUI protection focuses on implementing cybersecurity safeguards.
References:
DoD Instruction 5200.48 (CUI Program)
DFARS 252.204-7012
CMMC 2.0 Level 2 Practices (NIST SP 800-171)
by Nelly at Jul 23, 2025, 06:05 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).