A defense contractor needs to share FCI with a subcontractor and sends this data in...

[Reference:NIST SP 800-171 Rev. 2, 3.1.3– "Control CUI (or FCI) by transmitting it using authorized mechanisms.", D. Generate FCI→ Incorrect, Generating FCI means creating new contract-related information. The contractor is not creating FCI in this scenario but merely transmitting it., Official References Supporting the Correct AnswerCMMC 2.0 Level 1 Practices (FAR 52.204-21 Basic Safeguarding Controls), 3.1.3: "Control CUI (or FCI) by transmitting it using authorized mechanisms.", This confirms that email transmission falls under"transmitting" FCI, not managing or processing., NIST SP 800-171 Rev. 2 (Protecting CUI in Non-Federal Systems), Requirement 3.13.8: "Implement cryptographic methods to protect CUI when transmitted.", While this applies more to CUI, FCI should also be protected during transmission, confirming that email is a form oftransmittinginformation., ConclusionSince the contractor issendingFCI via email, the correct answer isC. Transmit FCI.This aligns withCMMC 2.0 Level 1practices underFAR 52.204-21andNIST SP 800-171, which emphasize securing transmitted data., ]