Certified CMMC Professional (CCP) — Question 14

An assessment is being conducted at a remote client site. For the duration of the assessment, the client has provided a designated hoteling space in their secure facility which consists of a desk with access to a shared printer. After noticing that the desk does not lock, a locked cabinet is requested but the client does not have one available. At the end of the day, the client provides a printout copy of an important network diagram. The diagram is clearly marked and contains CUI. What should be done NEXT to protect the document?

Answer options

• A. Take it with them to review in the evening.
• B. Leave it on the desk for review the following day.
• C. Put it in the unlocked desk drawer for review the following morning.
• D. Take a picture with the personal phone before securely shredding it.

Correct answer: A

Explanation

The correct action is to take the document with them to ensure it is not left unsecured overnight, which could lead to unauthorized access. Leaving it on the desk or in an unlocked drawer would expose it to potential risks, while taking a picture before shredding does not maintain the integrity of the sensitive information.