Câu 30: CCA: CMMC Certified Assessor

An OSC has built an enclave for its production environment. The enclave sits behind a firewall. Behind the firewall is a switch that all equipment plugs into. There is, however, a shipping workstation and physically connected label printer (which communicates to the sales system (no CUI is processed)) that the OSC claims are Risk Managed Assets. Other than showing that the shipping workstation and label printer are not intended to store or transmit CUI, and documenting the SSP, how BEST would the OSC show that the shipping workstation and label printer are Contractor Risk Managed Assets?

1. A. Document the shipping workstation and label printer in the asset inventory; show that they are managed using industry risk-based security best practices; and include them in the network diagram to facilitate scoping discussions during the pre-assessment.
2. B. Document the shipping workstation and label printer in the asset inventory; show that they are managed using the organization's risk-based security policies and procedures; and include them in the network diagram. — đáp án hiện tại
3. C. Document in the asset inventory and include them in the network diagram to facilitate scoping discussions during the pre-assessment.
4. D. Document the shipping workstation and label printer in the asset inventory; show that they are managed using vendor-recommended risk-based security best practices; and include them in the network diagram.