Exam CMMC-CCP Topic 1 Question 43 Discussion

Understanding the CMMC Level 2 Final Report RequirementsFor aCMMC Level 2 Assessment, theFinal CMMC Assessment Results Reportmust include:
* Assessment findings for each practice
* Final ratings (MET or NOT MET) for each practice
* A detailed rationale for each practice rated as NOT MET
* The CMMC Assessment Process (CAP) Guidestates that if a practice is markedNOT MET, theassessors must provide a rationale explaining why it failed.
* This rationale helps theOSC understand what needs remediationand, if applicable, whether the deficiency can be addressed via aPlan of Action & Milestones (POA&M).
* TheFinal Report serves as an official recordand must be submitted as part of theresults package.
* A. Affirmation for each practice or control (Incorrect)
* While the report includes aMET/NOT MET ratingfor each practice,affirmation is not a required component.
* C. Suggested improvements for each failed practice (Incorrect)
* Assessors do not provide recommendations for improvement-they only document findings and rationale.
* Providing suggestions would create aconflict of interestperCMMC-AB Code of Professional Conduct.
* D. Gaps or deltas due to any reciprocity model are recorded as met (Incorrect)
* If an organization isleveraging reciprocity (e.g., FedRAMP, Joint Surveillance Voluntary Assessments), gapsmust still be documented-not automatically marked as "MET."
* The correct answer isB. Documented rationale for each failed practice, as this is amandatory requirement in the Final CMMC Assessment Results Report.
References:
CMMC Assessment Process (CAP) Guide
DFARS 252.204-7021