Exam CCP topic 1 question 119 discussion

The correct answer is: ✅ D. NIST SP 800-171A 📘 Explanation: The CMMC Assessment Process (CAP) and the CMMC Assessment Guide – Level 2 explicitly state that the assessment procedures used in CMMC are based on: NIST Special Publication 800-171A, titled "Assessing Security Requirements for Controlled Unclassified Information." This document provides the assessment objectives, methods (examine, interview, test), and objects used to evaluate the implementation of the security requirements defined in NIST SP 800-171. ❌ Why the Other Options Are Incorrect: A. NIST SP 800-53: Defines security and privacy controls for federal information systems, not specific to CUI or CMMC. B. NIST SP 800-53A: Provides assessment procedures for SP 800-53 controls, not for SP 800-171. C. NIST SP 800-171: Defines the security requirements for protecting CUI, but not the assessment procedures.