Exam CCP topic 1 question 130 discussion

Actual exam question from Cyber AB's CCP

Question #: 130
Topic #: 1

An OSC lead has provided company information, identified that they are seeking CMMC Level 2, stated that they handle FCI, identified stakeholders, and provided assessment logistics. The OSC has provided the company’s cyber hygiene practices that are posted on every workstation, visitor logs, and screenshots of the configuration of their FedRAMP-approved applications. The OSC has not won any DoD government contracts yet but is working on two proposals. Based on this information, which statement BEST describes the CMMC Level 2 Assessment requirements?

A. Ready because there is no need to certify this company until after they win a DoD contract.
B. Not ready because the OSC is not on contract because they do not know the scope of FCI protection required by the contract.
C. Not ready because the OSC still lacks artifacts that prove they have implemented all the CMMC Level 2 Assessment requirements.
D. Ready because all DoD contractors are required to achieve CMMC Level 2; therefore, they are being proactive in seeking certification.

Show Suggested Answer

Suggested Answer: B 🗳️

by 88cfdd0 at Nov. 6, 2025, 4:34 p.m.

Comments

Submit Cancel

88cfdd0

3 weeks ago

Selected Answer: C

I could argue that B & C are both correct. They are not ready because they do not have an L2 CMMC certification, or do not know what level the contracts call for. So how can they bid for a contract with no certification or knowledge of the contract?

upvoted 1 times

...