Home Library Explore SAT

Home Library Explore SAT

CFT (27-03) Flashcards | StudBud

Explore/CFT (27-03)

What is the name of the third-party organizations authorized to conduct CMMC assessments?

What kind of information does CUI refer to?

CFT (27-03)

10 terms·StudBud Administration·57 plays

Imported from external platform

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
What kind of information does CUI refer to?
Computer Utility Interface
Certified User Information
Controlled Unclassified Information
Common User Infrastructure
2
What is the name of the third-party organizations authorized to conduct CMMC assessments?
FedInspectors
DoD Cyber Auditors
C3PAOs
CyberCops
3
What is the assessment requirement for Level 1?
Government assessment
No assessment required
Third-party audit
Annual self-assessment
4
Which CMMC 2.0 level focuses on basic safeguarding of FCI?
Level 3 – Expert
Level 4 – Tactical
Level 2 – Advanced
Level 1 – Foundational
5
Which organization developed CMMC?
National Security Agency
Department of Defense
Department of Homeland Security
Federal Bureau of Investigation
6
CMMC Level 2 aligns with which NIST standard?
NIST SP 800-171
NIST SP 800-172
NIST SP 800-30
NIST SP 800-53
7
How many maturity levels are in CMMC 2.0?
6
5
3
4
8
Which CMMC level requires government-led assessments?
Level 1
Level 2
Level 4
Level 3
9
What does CMMC stand for?
Certified Military Cybersecurity Model
Cybersecurity and Military Management Certification
Cybersecurity Maturity Model Certification
Cybersecurity Model for Military Contractors
10
What is the main goal of CMMC?
Enforce physical security standards
Protect FCI and CUI in the Defense Industrial Base
Improve network speed
Reduce email spam in DoD networks