Câu 23: CCA: CMMC Certified Assessor

While conducting a CMMC Level 2 Assessment for a small waveguide manufacturer, the client provides a copy of their CMMC Level 1 Self-Assessment that their senior official has recently approved and uploaded to the Supplier Performance Risk System (SPRS). What type of information may be covered within the Level 1 Self-Assessment that is OUTSIDE the scope of a Level 2 Assessment?

1. A. Sensitive Compartmented Information (SCI) shredded by an approved vendor — đáp án hiện tại
2. B. FCI data within the scope described in the contractor self-assessment
3. C. CUI in paper format
4. D. FCI within the CUI production enclave