Secret Quiz 3

A SPRS stands for:

• Service Provider Risk System
• Supplier Performance Risk System
• Service Provider Reservation System
• Service Priority Release Sequence

The initial contact from the OSC:

• Must be made via the CMMC Marketplace's online intake form
• Can be made via the CMMC Marketplace's online intake form or by direct email or phone call
• Must be made via the CMMC Marketplace's online intake form and direct email
• Must be made by phone call

The Evidence collection approach has implications for the following aspects of the Assessment:

• Usefulness and accuracy of the Assessment results
• The amount of time and effort expended by the OSC in preparing for the assessment
• All of these
• Ability of the Assessment Team to make accurate judgment

Sanitization techniques include:

• Formatting
• Copying
• Authenticating
• Purging

CRM stands for:

• Conceptual Reference Model
• Customer Responsibility Matrix
• Customer Relationship Management
• Common Risk Management

A control is deemed inheritable when:

• The system receives protection from the implemented control, but the control is implemented by an external entity
• The system or program receives protection from the implemented control, but the control is developed, implemented, assessed, authorized, and monitored by an internal or external entity other than the entity responsible for the system or program
• The program receives protection from the implemented control, but the control is monitored by an internal or external entity other than the entity responsible for the system or program
• The system or program receives protection from the implemented control, but the control is implemented by an external entity other than the entity responsible for the system or program

Which of the following is the best answer for describing Event?

• An event is any observable occurence in a system, which includes unlawful or unauthorized system activity
• An event is any logged occurrence in a system
• An event is the occurrence of an attack
• An event is any observable malicious system activity

Assessment results must:

• Be approved in signature by the OSC prior to upload into CMMC eMASS
• Formatted by the CMMC Concept of Operations Data Custodian prior to upload into CMMC eMASS
• Meet internal C3PAO review, quality assurance, and approval procedures before the Assessment result data are uploaded into CMMC eMASS
• Be approved by the Cyber AB prior to upload into CMMC eMASS

Incorporating, restating, or paraphrasing information from its originally designated form into a newly created document means:

• Copy
• Plagiarize
• Re-use
• Recycle

The cui program is founded on the prerequisite that only information requiring protection based in a law, Federal regulation, or government-wide policy can qualify as:

• SBU
• CUI
• FOUO
• FCI