nerdexam
(ISC)2(ISC)2

CISSP · Question #631

CISSP Question #631: Real Exam Question with Answer & Explanation

The correct answer is D: Level 3: Defined. In CMMI, Level 3 (Defined) is characterized by processes that are tailored from the organization's standard process set using established tailoring guidelines, making them consistent and organization-wide.

Submitted by amina.ke· Mar 5, 2026Software Development Security

Question

According to the Capability Maturity Model Integration (CMMI), which of the following levels is identified by a managed process that is tailored from the organization's set of standard processes according to the organization's tailoring guidelines?

Options

  • ALevel 0: Incomplete
  • BLevel 1: Performed
  • CLevel 2: Managed
  • DLevel 3: Defined

Explanation

In CMMI, Level 3 (Defined) is characterized by processes that are tailored from the organization's standard process set using established tailoring guidelines, making them consistent and organization-wide.

Common mistakes.

  • A. Level 0 (Incomplete) describes a process that is either not performed or only partially performed, with no defined outcomes or managed attributes.
  • B. Level 1 (Performed) describes a process that accomplishes the needed work to produce work products but lacks the rigor of planning, monitoring, or organizational standards.
  • C. Level 2 (Managed) describes a process that is planned, monitored, and controlled at the project level, but it is not yet tailored from an organizational set of standard processes, which is the hallmark of Level 3.

Concept tested. CMMI maturity levels and defined process characteristics

Reference. https://cmmiinstitute.com/learning/appraisals/levels

Topics

#CMMI#Process maturity#Software development lifecycle

Community Discussion

No community discussion yet for this question.

Full CISSP PracticeBrowse All CISSP Questions