The course material describes Cybersecurity Maturity Model Certification (CMMC) as including three levels and 14 control domains.
Answer
true
Explanation
### Why this is right
The material describes CMMC 2.0 as having Foundational, Advanced, and Expert levels. It also lists 14 control domains, including Access Control, Incident Response, Risk Assessment, and System Integrity.
### The concept
CMMC is a certification model for defense contractor cybersecurity practices. Its levels relate to information sensitivity and security requirements. The material identifies practices such as multifactor authentication, vulnerability scans, incident response plans, and system security plans as relevant to compliance.
### The other options
- **False**: this would conflict with the stated level count and domain count in the course material.
### Terms
- **Cybersecurity Maturity Model Certification (CMMC)**: A certification model for cybersecurity practices in the defense contractor context.
- **Control domain**: A subject area grouping related security requirements.
- **Multifactor authentication**: Authentication that requires more than one type of evidence to verify a user.
### Remember
For the supplied CMMC overview, recall three named levels and 14 control domains.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free