Cyber AB CMMC-CCP Exam - Topic 6 Question 7 Discussion

Actual exam question for Cyber AB's CMMC-CCP exam

Question #: 7
Topic #: 6

During the review of information that was published to a publicly accessible site, an OSC correctly identifies that part of the information posted should have been restricted. Which item did the OSC MOST LIKELY identify?

AFCI

BChange of leadership in the organization

CLaunching of their new business service line

DPublic releases identifying major deals signed with commercial entities

Show Suggested Answer

Suggested Answer: A

Understanding Federal Contract Information (FCI) and Publicly Accessible InformationFederal Contract Information (FCI)isnon-public informationprovided by or generated for the U.S. governmentunder a contractthat isnot intended for public release.

Key Characteristics of FCI:FCI includesdetails related togovernment contracts, project specifics, and performance data.

It must be protected under FAR 52.204-21, which requiresbasic safeguarding measuresto prevent unauthorized access.

Posting FCI on a public site is a security violationsince it ismeant to be restrictedfrom public disclosure.

A . FCI Correct

FCI must be protected from unauthorized access, and if it wasincorrectly published online, it should have been restricted.

B . Change of leadership in the organization Incorrect

Leadership changes are typically public informationand do not require restriction unless they involve sensitive government-related security clearances.

C . Launching of their new business service line Incorrect

Marketing and business announcementsare generallypublicly availableandnot restricted information.

D . Public releases identifying major deals signed with commercial entities Incorrect

Commercial contracts and business deals are not considered FCIunless they involvegovernment contracts.

Why is the Correct Answer 'A. FCI (Federal Contract Information)'?

FAR 52.204-21 (Basic Safeguarding of Covered Contractor Information Systems)

DefinesFCI as sensitive but unclassified informationthat must beprotected from public disclosure.

CMMC 2.0 Level 1 Requirements

Requires contractors toprotect FCI under basic cybersecurity standardsto prevent unauthorized exposure.

DoD Guidance on FCI Protection

States thatpublishing FCI on public websites violates federal cybersecurity requirements.

CMMC 2.0 Reference Supporting This Answer:

by Alline at Nov 22, 2025, 09:34 PM

Limited Time Offer

25%

Off

Get Premium CMMC-CCP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Penney

9 hours ago

Major deals should be public, right? Not sure about that one.

upvoted 0 times

...

Flo

6 days ago

Wait, are we really talking about FCI? Seems odd.

upvoted 0 times

...

Melynda

11 days ago

I think it's more likely the change of leadership.

upvoted 0 times

...

Oren

16 days ago

Definitely FCI, that should be restricted.

upvoted 0 times

...

Jordan

21 days ago

Haha, the OSC must have been sleeping on the job if they thought the new business service line was restricted. D all the way!

upvoted 0 times

...

Hobert

26 days ago

Launching a new business service line? That's hardly sensitive information. I'd go with D.

upvoted 0 times

...

Chantay

1 month ago

Hmm, I'm not sure. Could it be the change of leadership in the organization? That kind of info is usually kept under wraps.

upvoted 0 times

...

Novella

1 month ago

D) Public releases identifying major deals signed with commercial entities seems like the obvious choice here.

upvoted 0 times

...

Alva

1 month ago

I think the OSC most likely identified the FCI (Controlled Unclassified Information) as the restricted information.

upvoted 0 times

...

Dean

2 months ago

I practiced a similar question, and I think C) might be the answer since launching services can involve sensitive strategies.

upvoted 0 times

...

Thersa

2 months ago

I'm leaning towards B) Change of leadership, but I feel like that could be public info too. It's tricky!

upvoted 0 times

...

Sherita

2 months ago

I think it might be A) FCI since that usually needs to be restricted, but I'm not entirely sure.

upvoted 0 times

...

Tori

2 months ago

I think it’s A) FCI. That’s sensitive info.

upvoted 0 times

...

Sharan

2 months ago

This is a tricky one. I'm a bit confused about what exactly an "OSC" is and what kind of information they would be reviewing. I'll need to make sure I understand the context before I can decide on the best answer.

upvoted 0 times

...

Tu

3 months ago

I'm leaning towards option D - the public releases identifying major deals. That kind of commercial information could give competitors an advantage if it was restricted. But I'm not 100% sure, so I'll need to think it through carefully.

upvoted 0 times

...

Levi

3 months ago

I remember a practice question about public releases, so maybe D) is the right answer? It seems like something that could be sensitive.

upvoted 0 times

...

Meghann

3 months ago

Okay, let's see. I'm guessing it's probably not the change in leadership or the new business service line - those seem like the kind of things a company would want to publicize. The FCI or deals with commercial entities seem more likely to be sensitive information.

upvoted 0 times

...

Muriel

3 months ago

Hmm, this seems like a tricky one. I'll need to carefully consider the options and think about what kind of sensitive information an OSC would be most likely to identify as needing to be restricted.

upvoted 0 times

Felicitas

2 months ago

I think it’s definitely FCI.

upvoted 0 times

...