Cyber AB CMMC-CCP 考試概覽:

認證廠商:	網路安全成熟度模型認證認可機構（Cyber AB）
考試名稱:	CMMC專業認證（CCP）考試
考試代碼:	CMMC-CCP
及格分數:	500 分（量表分數）
實際考試題數:	170
支援語言:	English
考試形式:	選擇題
證照有效期限:	一般為 3 年（需辦理續證並完成持續教育）
考試費用:	275 美元（考試費） + 200 美元 CCP 註冊費
相關認證:	CMMC講師認證（CCI） CMMC評估員認證（CCA）
考試時間:	210 分鐘
範例考題:	Cyber AB CMMC-CCP 範例考題
考試方式:	由 Meazure Learning（原 Scantron）負責辦理，可於授權考場應試，或透過線上監考模式應試
必備條件:	完成經授權之合格培訓機構（LTP）所開設的 CCP 課程、取得美國國防部第 3 級背景調查合格結果、通過美國國防部管制非機密資訊（CUI）認知訓練
官方大綱網址:	https://cyberab.org/Certified-CMMC-Exam-Information

Cyber AB CMMC-CCP 考試大綱：

主題	簡介
主題 1	CMMC-AB Code of Professional Conduct (Ethics): This section of the exam measures the integrity of cybersecurity professionals by evaluating their understanding of the CMMC-AB Code of Professional Conduct. It emphasizes ethical responsibilities, including confidentiality, objectivity, professionalism, conflict-of-interest avoidance, and respect for intellectual property, ensuring candidates can uphold ethical standards throughout their CMMC-related duties.
主題 2	CMMC Model Construct and Implementation Evaluation: This section of the exam measures the evaluative skills of cybersecurity assessors, focusing on the application and assessment of the CMMC model. It includes understanding its levels, domains, practices, and implementation criteria, and how to assess whether organizations meet the required cybersecurity practices using evidence-based evaluation.
主題 3	CMMC Ecosystem: This section of the exam measures the skills of consultants and compliance professionals and focuses on the different roles and responsibilities across the CMMC ecosystem. Candidates must understand the functions of entities such as the Department of Defense, CMMC-AB, Organizations Seeking Certification, Registered Practitioners, and Certified CMMC Professionals, as well as how the ecosystem supports cybersecurity standards and certification.
主題 4	Scoping: This section of the exam measures the analytical skills of cybersecurity practitioners, highlighting their ability to properly define assessment scope. Candidates must demonstrate knowledge of identifying and classifying Controlled Unclassified Information (CUI) assets, recognizing the difference between in-scope, out-of-scope, and specialized assets, and applying logical and physical separation techniques to determine accurate scoping for assessments
主題 5	CMMC Governance and Source Documents: This section of the exam measures the capabilities of legal or compliance advisors, covering key regulatory frameworks that govern cybersecurity compliance. Topics include Federal Contract Information, Controlled Unclassified Information, the role of NIST SP 800-171, DFARS, FAR, and the structure and requirements of CMMC v2.0, including self-assessments and certification levels.