Discuss Cyber AB CMMC-CCP Exam Topic 6 Question 7

During the review of information that was published to a publicly accessible site, an OSC correctly identifies that part of the information posted should have been restricted. Which item did the OSC MOST LIKELY identify?

AFCI

BChange of leadership in the organization

CLaunching of their new business service line

DPublic releases identifying major deals signed with commercial entities

Suggested Answer: A

Understanding Federal Contract Information (FCI) and Publicly Accessible InformationFederal Contract Information (FCI)isnon-public informationprovided by or generated for the U.S. governmentunder a contractthat isnot intended for public release.

Key Characteristics of FCI:FCI includesdetails related togovernment contracts, project specifics, and performance data.

It must be protected under FAR 52.204-21, which requiresbasic safeguarding measuresto prevent unauthorized access.

Posting FCI on a public site is a security violationsince it ismeant to be restrictedfrom public disclosure.

A . FCI Correct

FCI must be protected from unauthorized access, and if it wasincorrectly published online, it should have been restricted.

B . Change of leadership in the organization Incorrect

Leadership changes are typically public informationand do not require restriction unless they involve sensitive government-related security clearances.

C . Launching of their new business service line Incorrect

Marketing and business announcementsare generallypublicly availableandnot restricted information.

D . Public releases identifying major deals signed with commercial entities Incorrect

Commercial contracts and business deals are not considered FCIunless they involvegovernment contracts.

Why is the Correct Answer 'A. FCI (Federal Contract Information)'?

FAR 52.204-21 (Basic Safeguarding of Covered Contractor Information Systems)

DefinesFCI as sensitive but unclassified informationthat must beprotected from public disclosure.

CMMC 2.0 Level 1 Requirements

Requires contractors toprotect FCI under basic cybersecurity standardsto prevent unauthorized exposure.

DoD Guidance on FCI Protection

States thatpublishing FCI on public websites violates federal cybersecurity requirements.

CMMC 2.0 Reference Supporting This Answer:

Get Premium CMMC-CCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

29 comments · newest first

Elvis 6 months ago

Overall, A) FCI feels like the safest choice.

Toi 6 months ago

D) Major deals could be public, but still risky.

Gail 6 months ago

C) Launching a new service? That’s not really restricted info.

Fanny 7 months ago

What about B) Change of leadership? That could be sensitive too.

Jarvis 7 months ago

I agree, A) FCI makes sense. It should be restricted.

Shaun 7 months ago

Totally agree, FCI makes the most sense here!

Penney 8 months ago

Major deals should be public, right? Not sure about that one.

Flo 8 months ago

Wait, are we really talking about FCI? Seems odd.

Melynda 8 months ago

I think it's more likely the change of leadership.

Oren 8 months ago

Definitely FCI, that should be restricted.

Jordan 8 months ago

Haha, the OSC must have been sleeping on the job if they thought the new business service line was restricted. D all the way!

Hobert 8 months ago

Launching a new business service line? That's hardly sensitive information. I'd go with D.

Chantay 9 months ago

Hmm, I'm not sure. Could it be the change of leadership in the organization? That kind of info is usually kept under wraps.

Novella 9 months ago

D) Public releases identifying major deals signed with commercial entities seems like the obvious choice here.

Alva 9 months ago

I think the OSC most likely identified the FCI (Controlled Unclassified Information) as the restricted information.

Dean 9 months ago

I practiced a similar question, and I think C) might be the answer since launching services can involve sensitive strategies.

Thersa 9 months ago

I'm leaning towards B) Change of leadership, but I feel like that could be public info too. It's tricky!

Sherita 9 months ago

I think it might be A) FCI since that usually needs to be restricted, but I'm not entirely sure.

Tori 10 months ago

I think it’s A) FCI. That’s sensitive info.

Sharan 10 months ago

This is a tricky one. I'm a bit confused about what exactly an "OSC" is and what kind of information they would be reviewing. I'll need to make sure I understand the context before I can decide on the best answer.

Tu 10 months ago

I'm leaning towards option D - the public releases identifying major deals. That kind of commercial information could give competitors an advantage if it was restricted. But I'm not 100% sure, so I'll need to think it through carefully.

Levi 10 months ago

I remember a practice question about public releases, so maybe D) is the right answer? It seems like something that could be sensitive.

Meghann 11 months ago

Okay, let's see. I'm guessing it's probably not the change in leadership or the new business service line - those seem like the kind of things a company would want to publicize. The FCI or deals with commercial entities seem more likely to be sensitive information.

Muriel 11 months ago

Hmm, this seems like a tricky one. I'll need to carefully consider the options and think about what kind of sensitive information an OSC would be most likely to identify as needing to be restricted.

Shayne 5 months ago

↳ replying to Muriel

I’m leaning towards FCI as well.

Arlyne 6 months ago

↳ replying to Muriel

Major deals could be sensitive too.

Jerlene 6 months ago

↳ replying to Muriel

New business service line sounds okay to share.

Lynelle 6 months ago

↳ replying to Muriel

Change of leadership seems too public.

Felicitas 10 months ago

↳ replying to Muriel

I think it’s definitely FCI.

Cyber AB CMMC-CCP Exam - Topic 6 Question 7 Discussion