Summer Certification Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam CMMC-CCA All Questions
Exam CMMC-CCA All Questions

View all questions & answers for the CMMC-CCA exam

Cyber AB CMMC CMMC-CCA Question # 53 Topic 6 Discussion

CMMC-CCA Exam Topic 6 Question 53 Discussion:
Question #: 53
Topic #: 6

During a CMMC assessment, the Lead Assessor requests evidence from the OSC to support their claim that several access control and authentication practices are inherited from their enterprise-level Identity and Access Management (IAM) system. The OSC claims that their parent company manages the IAM system. Which of the following types of evidence would be the most appropriatefor the OSC to demonstrate these inherited practices?


A.

Documented policies, procedures, and system configurations from the enterprise IAM system, showing how the assessment objectives for the inherited practices are met.


B.

An attestation from a third-party auditor confirming that the parent company’s IAM system is compliant with relevant security standards.


C.

Verbal confirmation from the OSC’s IT manager that the enterprise IAM system handles access control and authentication.


D.

A self-assessment report from the OSC stating that the enterprise IAM system meets the inherited practices.


Get Premium CMMC-CCA Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.