CCP practice question

CMMC Governance and Source Documents — 15% of the exam

An OSC handles FCI but no CUI. Which set of security requirements applies?

Both the 15 basic requirements and a subset of NIST SP 800-171The 15 requirements in 48 CFR 52.204-21The 110 requirements in NIST SP 800-171The 17 practices defined under CMMC Level 1

Read the lesson: Federal Contract Information and Controlled Unclassified Information