Certified Cybersecurity Maturity Model Certification (CMMC) Professional (CCP) Practice Exam

Disable ads (and more) with a membership for a one time $2.99 payment

Enhance your understanding for the CMMC Professional Test. Engage with flashcards and multiple choice questions, complete with hints and explanations. Elevate your cybersecurity knowledge and prepare diligently for your certification exam.

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


How many controls are defined in CMMC Level 2?

  1. 50 controls

  2. 75 controls

  3. 110 controls

  4. 150 controls

The correct answer is: 110 controls

In CMMC Level 2, there are 110 controls defined. This level serves as a stepping stone to Level 3 and consists of practices that align with the National Institute of Standards and Technology (NIST) Special Publication 800-171. Level 2 is structured to enhance an organization’s cybersecurity posture through a more comprehensive approach to implementing practices that protect sensitive information. The 110 controls encompass a variety of cybersecurity practices that organizations must implement to ensure they are prepared to handle controlled unclassified information (CUI). This level aids organizations in demonstrating their commitment to security in a more formalized manner, as they prepare for eventual compliance with Level 3, which has an even more extensive set of practices aimed at mitigating risks to sensitive data. Understanding the number of controls at each level is crucial for organizations aiming to achieve compliance, as it helps them establish a clear roadmap for improving their cybersecurity measures.