The CMMC Certification Boundary and Assessment Scope should include all information systems within the organization, regardless of whether they process CUI or not.

The CMMC Certification Boundary and Assessment Scope should only include the specific system that processes CUI and exclude all other systems.

The CMMC Certification Boundary should include the specific system that processes CUI, while the Assessment Scope should encompass all systems within the OSC.

The CMMC Certification Boundary should include the specific system that processes CUI. In contrast, the Assessment Scope should consist of all components of the information system that require authorization and excludes separately authorized systems to which the information system is connected.