Certified Cybersecurity Maturity Model Certification (CMMC) Professional (CCP) Practice Exam

How often should communications be monitored at organizational boundaries?

1. Only during working hours

2. Daily

3. Continuously

4. Only when high-risk activities occur

The correct answer is: Continuously

Monitoring communications at organizational boundaries continuously is essential for maintaining a strong security posture in an organization. By implementing continuous monitoring, organizations can identify and respond to potential threats and vulnerabilities in real-time. This proactive approach helps to mitigate risks such as unauthorized access, data breaches, and other malicious activities, which can occur at any time. Continuous monitoring allows for the detection of anomalies or suspicious activities as they happen, rather than relying on scheduled reviews or checkpoints that may delay response times. In the context of CMMC, where maintaining confidentiality, integrity, and availability of information is paramount, a continuous monitoring strategy ensures that potential security incidents are addressed swiftly, thereby reducing the impact on the organization. Organizations must be prepared to defend against threats that could arise outside of standard working hours or during activities that might be deemed high-risk. Thus, restricting monitoring to specific hours or events can lead to gaps in security that adversaries could exploit. By adopting a continuous monitoring approach, organizations demonstrate a commitment to maintaining a robust and responsive security environment.