Câu 24: CCA: CMMC Certified Assessor

The assessment team is discussing the pre-assessment scope with an OSC. The OSC would like to limit the scope of the security requirements in environments that contain FCI and/or CUI. In this case, the OSC should:

1. A. choose to conduct two separate CMMC certification activities. — đáp án hiện tại
2. B. define a CMMC Self-Assessment Scope for only those assets that process, store, or transmit CUI.
3. C. define an Assessment Scope for those assets that process, store, or transmit FCI.
4. D. request a single CMMC certification for both activities.