Exit CMMC-CCP Certified CMMC Professional (CCP)
Question 2 of 5
0% complete
Q2 Single choice

A CCP reviewing the AU (Audit and Accountability) domain requests system logs. The OSC provides logs, but they contain no timestamps.

What determination should be made?

  • A

    Evidence is adequate because logs exist

  • B

    Evidence is inadequate because timestamps are required to trace events

  • C

    Evidence is sufficient if logs cover at least 30 days

  • D

    Evidence is sufficient if policy references timestamps