1. Home
  2. Discussions
  3. Cyber AB
  4. CMMC
  5. CMMC-CCA Discussions
  6. CMMC-CCA Exam Topic 4 Question 38 Discussion

Cyber AB Certified CMMC Assessor (CCA) Exam CMMC-CCA Question # 38 Topic 4 Discussion

 Cyber AB Discussions      Browse All Questions      Go to Exam Detail      Get Premium Access
 Previous
Next  

Cyber AB Certified CMMC Assessor (CCA) Exam CMMC-CCA Question # 38 Topic 4 Discussion

CMMC-CCA Exam Topic 4 Question 38 Discussion:
Question #: 38
Topic #: 4

An OSC is undergoing a CMMC Level 2 assessment. The assessment team is reviewing the evidence for configuration management procedures per CMMC Practice CM.L2-3.4.1 – System Baselining. The assessors discover that the OSC has a documented process for creating system baselines. However, upon reviewing a sample server, they find software installed that is not listed in the baseline documentation. The OSC acknowledges the discrepancy and explains that they recently deployed new security software but have not updated the baseline documentation yet. The following conditions hold true for CMMC practices ineligible for deficiency corrections EXCEPT?
A.

Practices that could lead to significant exploitation of the network or exfiltration of CUI.

B.

Practices that were not implemented by the OSC prior to the current CMMC Assessment.

C.

Practices listed on the OSC’s Self-Assessment Practice Deficiency Tracker.

D.

Practices that involve minor updates to existing policies or procedures but have been in place for a period of time.

Get Premium CMMC-CCA Questions
Actual exam question for Cyber AB CMMC-CCA exam by Zyra23927 at Aug 7, 2025, 11:27:37 AM

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.

Submit
 Previous
Next