Exam CMMC-CCA Topic 3 Question 123 Discussion

Actual exam question for Cyber AB's CMMC-CCA exam
Question #: 123
Topic #: 3

During the examination of evidence for access control procedures, you review an OSC's Access Control List (ACL). The ACL appears to include most user accounts, but you notice that it lacks entries for several newly hired employees. You also realize that some parts of the OSC's access control policy haven't been signed and endorsed by senior management. Additionally, you notice multiple attestations from employees who are not the proper system owners. How should you proceed when encountering an incomplete artifact, such as the missing personnel in the access control list?

A. Request the OSC to provide a revised, complete version of the artifact within a specified timeframe. B. Disregard the incomplete artifact and rely on other evidence for the practice assessment. C. Document the incomplete artifact as an evidence gap and proceed with assessing the practice based on the available evidence. D. Mark the associated CMMC practice as 'NOT MET' due to the incomplete artifact.

Suggested Answer: C Vote an answer

Comprehensive and Detailed in Depth Explanation:
The CAP instructs assessors to document incomplete artifacts as evidence gaps and proceed with the assessment using available evidence, rather than immediately failing a practice or demanding revisions during the assessment. Option A (requesting revision) is not an option during evidence examination per CAP; remediation occurs post-assessment if needed. Option B (disregarding) risks missing critical gaps. Option D (marking 'NOT MET') is premature without assessing all evidence. Option C ensures a systematic approach, recording gaps for later scoring consideration.
Extract from Official Document (CAP v1.0):
* Section 2.2 - Conduct Assessment (pg. 25):"Incomplete documents should be recorded as evidence gaps. The Assessment Team shall methodically document all gaps and proceed with assessing the practice based on the remaining available evidence." References:
CMMC Assessment Process (CAP) v1.0, Section 2.2.

by Denise at Jul 08, 2026, 05:43 AM

Limited Time Offer

15%

Off

Get Premium CMMC-CCA Questions as Interactive Self Test Engine or PDF

Comments

Here are all the actual test exam dumps for IT exams. Most people prepare for the actual exams with our test dumps to pass their exams. So it's critical to choose and actual test pdf to succeed.

RECENT DISCUSSIONS

Useful Links

Contact Us

Our Working Time: ( GMT 0:00-15:00 )
From Monday to Saturday

Support: Contact now

If you have any question please leave me your email address, we will reply and send email to you in 12 hours.

Disclaimer:
Actual4test doesn't offer Real SANS and GIAC Exam Questions.
Oracle and Java are registered trademarks of Oracle and/or its affiliates
Actual4test material do not contain actual actual Oracle Exam Questions or material.
Actual4test doesn't offer Real Microsoft Exam Questions.
Microsoft®, Azure®, Windows®, Windows Vista®, and the Windows logo are registered trademarks of Microsoft Corporation
Actual4test Materials do not contain actual questions and answers from Cisco's Certification Exams. The brand Cisco is a registered trademark of CISCO, Inc
CFA Institute does not endorse, promote or warrant the accuracy or quality of these questions. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Actual4test does not offer exam dumps or questions from actual exams. We offer learning material and practice tests created by subject matter experts to assist and help learners prepare for those exams. All certification brands used on the website are owned by the respective brand owners. Actual4test does not own or claim any ownership on any of the brands.