CMMC CCA Practice Questions - Cyber AB CCA Certified CMMC Assessor Exam

Access More Questions

During a pre-assessment review, an OSC provides System Security Plan (SSP) documentation dated three years ago with no subsequent updates. What determination should the CCA make regarding AC.L2-3.1.1 (Access Control Policy)?

NOT MET because the SSP is outdated and does not reflect current system environment MET because the SSP exists and covers access control requirements NOT APPLICABLE because the SSP was created before CMMC requirements were finalized MET with deficiencies because the policy exists but needs updating

Correct Answer:

NOT MET because the SSP is outdated and does not reflect current system environment

Access more questions from this quiz

Continue to CMMC CCA Practice Questions - Cyber AB CCA Certified CMMC Assessor Exam for more practice questions and the full quiz experience.

Access More Questions