Cyber AB CMMC-CCP Exam - Topic 3 Question 4 Discussion

Actual exam question for Cyber AB's CMMC-CCP exam

Question #: 4
Topic #: 3

[All CMMC-CCP Questions]

The Advanced Level in CMMC will contain Access Control {AC) practices from:

ALevel 1.

BLevel 3.

CLevels 1 and 2.

DLevels 1,2, and 3.

Show Suggested Answer

Suggested Answer: D

Understanding Access Control (AC) in CMMC Advanced (Level 3)TheCMMC Advanced Level (Level 3)is designed for organizations handlinghigh-value Controlled Unclassified Information (CUI)and aligns with a subset ofNIST SP 800-172for advanced cybersecurity protections.

Access Control (AC) Practices in CMMC Level 3CMMC Level 1 includesbasic AC practices fromFAR 52.204-21(e.g., restricting access to authorized users).

CMMC Level 2 includesallAccess Control (AC) practices from NIST SP 800-171(e.g., managing privileged access).

CMMC Level 3 expands on Levels 1 and 2, incorporatingadditional protections from NIST SP 800-172, such as enhanced monitoring and adversary deception techniques.

CMMC Level 3 builds upon all previous levels, includingAccess Control (AC) practices from Levels 1 and 2.

Options A, B, and C are incorrectbecause Level 3 includesallprevious AC practices fromLevels 1 and 2, plus additional ones.

Why 'Levels 1, 2, and 3' is Correct?Breakdown of Answer ChoicesOption

Description

Correct?

A . Level 1

Incorrect--Level 3 includes AC practices fromLevels 1 and 2, not just Level 1.

B . Level 3

Incorrect -- Level 3 builds onLevels 1 and 2, not just Level 3 practices.

C . Levels 1 and 2

Incorrect--Level 3 containsadditionalAC practices beyond Levels 1 and 2.

D . Levels 1, 2, and 3

Correct -- Level 3 contains all AC practices from Levels 1 and 2, plus additional ones.

CMMC Model Framework-- Outlines howLevel 3 builds upon Level 1 and 2 practices.

NIST SP 800-172-- Definesadvanced cybersecurity controlsrequired inCMMC Level 3.

Official Reference from CMMC 2.0 DocumentationFinal Verification and ConclusionThe correct answer isD. Levels 1, 2, and 3, as CMMC Level 3 includesAccess Control (AC) practices from all previous levels plus additional enhancements.

by Lorean at Oct 04, 2025, 02:39 AM

Limited Time Offer

25%

Off

Get Premium CMMC-CCP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Latia

9 hours ago

I feel D is the safest choice. Comprehensive coverage!

upvoted 0 times

...

James

6 days ago

But Level 3 adds more depth. D makes sense.

upvoted 0 times

...

Anika

11 days ago

I'm leaning towards C. Levels 1 and 2 cover basics well.

upvoted 0 times

...

Willow

16 days ago

Levels 1 and 2 are definitely included too!

upvoted 0 times

...

Cyril

21 days ago

Wait, are you sure? That seems like a lot.

upvoted 0 times

...

Derick

26 days ago

Totally agree, it's all three levels!

upvoted 0 times

...

Nathan

1 month ago

I thought it was just Level 3.

upvoted 0 times

...

Jolene

1 month ago

It's definitely Levels 1, 2, and 3.

upvoted 0 times

...

Veda

1 month ago

I thought the Advanced Level would cover all levels, so I'm leaning towards D, but I need to double-check my notes.

upvoted 0 times

...

Francoise

2 months ago

I practiced a question similar to this, and I feel like it mentioned that Level 1 and 2 are foundational, but I can't recall if Level 3 is included.

upvoted 0 times

...

Twana

2 months ago

I remember studying that Level 3 has more stringent access controls, so it might be just B or D.

upvoted 0 times

...

Tasia

2 months ago

I think the Advanced Level includes practices from all levels, but I'm not entirely sure if it's just 1 and 2 or all three.

upvoted 0 times

...

Rana

2 months ago

Agreed! Access control needs all practices.

upvoted 0 times

...

Lanie

2 months ago

I don't know, but I'm hoping the exam doesn't have any trick questions. That would be a real pain in the AC!

upvoted 0 times

...

Holley

2 months ago

I think it's D. All levels are important.

upvoted 0 times

...

Kenneth

3 months ago

C could be right too, but I trust D more.

upvoted 0 times

...

Bong

3 months ago

D is the way to go. The Advanced Level needs to cover all the bases, so it has to include Levels 1, 2, and 3.

upvoted 0 times

...

Xochitl

3 months ago

Hmm, I'm going to go with B. The Advanced Level is supposed to be more comprehensive, so it should include the practices from Level 3.

upvoted 0 times

...

Annette

4 months ago

C seems like the correct answer. The Advanced Level would build upon the earlier levels, so it should include Levels 1 and 2.

upvoted 0 times

...

Nathan

4 months ago

I'm pretty sure it's D. The Advanced Level in CMMC should cover all the previous levels, including the Access Control practices.

upvoted 0 times

...

Billye

4 months ago

I'm a little unsure between C and D. Does the Advanced Level only include the AC practices from Levels 1 and 2, or does it really cover all three levels? I'll have to review the CMMC framework details to be sure.

upvoted 0 times

...

Nieves

4 months ago

I feel good about this one. The question is specifically asking about the Access Control practices, and the Advanced Level is designed to incorporate the full set of requirements. D is the clear choice here.

upvoted 0 times

...

Justine

4 months ago

Okay, let me break this down. The Advanced Level is supposed to be more comprehensive, so it makes sense that it would include the AC practices from all the previous levels. I'm going to go with D.

upvoted 0 times

...

Margret

4 months ago

Hmm, I'm a bit confused on this one. I know the Advanced Level builds on the lower levels, but I'm not sure if it includes all the AC practices or just the ones from the highest level. I'll have to think this through carefully.

upvoted 0 times

...

Nidia

5 months ago

I'm pretty sure the answer is D. The Advanced Level in CMMC would include Access Control practices from all the previous levels.

upvoted 0 times

Marg

3 months ago

Definitely, all levels should be included.

upvoted 0 times

...