CMMC CCA Practice Questions - Cyber AB CCA Certified CMMC Assessor Exam

Access More Questions

During an assessment, the OSC provides audit logs showing successful authentication events but cannot produce logs for failed authentication attempts. The OSC claims their SIEM solution only captures successful logons due to storage constraints. What is the correct determination for AU.L2-3.3.1 (Audit Events)?

MET because the OSC has audit logging implemented and documented their justification NOT MET because AU.L2-3.3.1 specifically requires auditing of failed logon attempts NOT APPLICABLE because storage constraints are a legitimate technical limitation MET with POAM because the control is partially implemented

Correct Answer:

NOT MET because AU.L2-3.3.1 specifically requires auditing of failed logon attempts

Access more questions from this quiz

Continue to CMMC CCA Practice Questions - Cyber AB CCA Certified CMMC Assessor Exam for more practice questions and the full quiz experience.

Access More Questions