Cyber AB Registered Practitioner Exam Prep

What you will be able to do

• Explain the CMMC ecosystem, the Cyber AB and the final rule
• Describe the CMMC model, its levels and assessment types
• Scope an environment correctly for FCI and CUI
• Map NIST SP 800-171 requirements to assessment objectives
• Perform a readiness engagement within the RP scope of practice
• Apply the RP code of professional conduct and its boundaries
• Pass a timed practice exam covering the RP body of knowledge

What is inside

5 modules, 20 lessons. Each module ends in a graded quiz.

1. 01

   The CMMC Program and Who Does What

   Covers the CMMC Program Overview and the CMMC Ecosystem domain: why the Department of Defense built CMMC on top of existing DFARS safeguarding obligations, what the 32 CFR Part 170 program rule actually establishes, and how Levels 1, 2, and 3 reach a company through a contract. You also learn the full cast of the ecosystem, from Registered Practitioners and Registered Provider Organizations through Certified Assessors, C3PAOs, and the government assessors, along with the independence rules that govern each. The module closes with the phased acquisition rollout and what it means for the clients an RP advises.

   4 lessons · 15 quiz questions

2. 02

   CUI, FCI, and Scoping the Environment

   Covers the Registered Practitioner domain on Federal Contract Information, Controlled Unclassified Information, and CMMC assessment scoping. You will learn to tell FCI from CUI, read the clauses and markings that put a safeguarding obligation on a contract, and place every asset into the correct CMMC Level 1 or Level 2 scoping category. The module closes with enclave design, data flow mapping, the system security plan baseline, and the rules that govern cloud providers, managed service providers, and shared responsibility.

   4 lessons · 15 quiz questions

3. 03

   The 14 Domains and 110 Security Requirements

   Covers the NIST SP 800-171 Security Requirement Families and CMMC Practices domain by working through all fourteen families and the 110 security requirements that make up CMMC Level 2. Each lesson groups related families so you learn what a requirement actually demands, the evidence an assessor expects to see, and the advisory guidance a Registered Practitioner can offer without crossing into assessment work. The module closes with a fifteen question domain quiz written in exam style.

   4 lessons · 15 quiz questions

4. 04

   Assessment, Scoring, and Remediation

   Covers the CMMC Assessment Process, the DoD Assessment Methodology that produces a SPRS score, and the narrow Plan of Action and Milestones rules that decide whether an organization earns a Conditional or a Final CMMC Status. You learn the four CAP phases, the examine, interview, and test methods and the objects each one touches, the scoring math that starts at 110 with its weighted deductions and two partial credit cases, the 88 point gate and the 180 day closeout clock, and how a Registered Practitioner prepares an organization for a third party assessment without crossing the independence line. Every lesson ends with exam style checks, and the module closes with a fifteen question domain quiz.

   4 lessons · 15 quiz questions

5. 05

   Practicing as an RP: Ethics and Client Delivery

   Covers the Cyber AB Registered Practitioner domain spanning professional conduct, scope of practice, and advisory engagement delivery. You learn the Code of Professional Conduct and how conflicts, confidentiality, and marks rules apply to advisory work, the hard boundary between permitted consulting and prohibited assessment activity, and how to run a readiness engagement from scoping through gap analysis, documentation, and a remediation roadmap. The module closes with credential maintenance, RPO affiliation, and the progression toward advanced registration and the assessor track.

   4 lessons · 15 quiz questions