Certified CMMC Professional (CCP) — Question 7

Prior to conducting a CMMC Assessment, the contractor must specify the CMMC Assessment scope by categorizing all assets. Which two asset categories are always assessed against CMMC practices?

Answer options

• A. CUI Assets and Specialized Assets
• B. Security Protection Assets and CUI Assets
• C. Specialized Assets and Contractor Risk Managed Assets
• D. Security Protection Assets and Contractor Risk Managed Assets

Correct answer: A

Explanation

The correct answer is A because CUI Assets and Specialized Assets are fundamental categories that must always be evaluated during a CMMC Assessment. The other options include asset types that may not necessarily be assessed as part of the core CMMC practices, making them incorrect.