NERC CIP ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A substation containing Critical Cyber Assets (CCAs) is located in a remote area with no continuous power for electronic monitoring. The entity wants to comply with CIP-006 but has limited resources. Which approach is most compliant?

   • ARemove the CCAs from the substation to avoid the physical security requirement
   • BHire a security guard to patrol the substation 24/7
   • CInstall a physical lock and a tamper-evident seal, and document that electronic monitoring is not feasible due to lack of power
   • DInstall a battery-powered camera that records only when motion is detected
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A BES entity is found to be non-compliant with CIP-004 because it did not complete personnel risk assessments for all employees with access to CCAs. The entity has since completed the assessments and wants to minimize the penalty. What is the most appropriate action?

   • ARequest a waiver from NERC for the violation
   • BDeny the violation because the assessments are now complete
   • CWait for the regional entity to discover the violation during the next audit
   • DSelf-report the violation to the regional entity and provide evidence of the corrective action taken
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of the cyber security plan required under NERC CIP?

   • ATo document the implementation of security controls for critical cyber assets
   • BTo provide a public statement of the entity's commitment to cybersecurity
   • CTo specify the budget allocated for cybersecurity investments
   • DTo list all security incidents that have occurred in the past year
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A new compliance analyst is reviewing the NERC CIP standards for the first time. The analyst is trying to understand the relationship between NERC and FERC. The analyst reads that NERC is responsible for developing and enforcing the CIP standards. What is the role of FERC in this process?

   • AFERC is responsible for implementing the CIP standards at the utility level.
   • BFERC approves the CIP standards and has oversight of NERC's enforcement activities.
   • CFERC develops the CIP standards and NERC enforces them.
   • DFERC is an industry group that provides guidance on CIP standards, but has no regulatory authority.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A utility has developed a recovery plan for its Critical Cyber Assets. The plan has been reviewed and approved. To meet NERC CIP requirements, what must the utility do with this plan on a recurring basis?

   • ATest the plan at least once every calendar year and update it based on the test results.
   • BReview the plan annually and update it only if there are significant changes to the environment.
   • CSubmit the plan to the regional entity for approval every three years.
   • DKeep the plan as a static document and only update it after a real incident.
   Reveal Solution Discussion Select an answer first