
GIAC Critical Infrastructure Protection (GCIP)
Domain 2Objective 1
BES Cyber System Categorization GCIP Practice Questions (Page 2)
Part of the Cyber System Identification and Protection domain, which makes up ~23% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~16–28 in this domain), expect 5–9 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)
16questions here
4free pages
5concepts
Questions 6–10
- 6
A distribution provider is evaluating a distributed energy resource (DER) that is connected to the distribution system but is capable of exporting power to the BES. The DER has a controller that can regulate voltage and frequency at the point of interconnection. The distribution provider has not yet determined if the DER is part of the BES. Which of the following is the most appropriate first step in determining if the controller is a BES Cyber Asset?
Select an answer first - 7
Which NERC Functional Model function is primarily responsible for ensuring that generation and load are balanced within a specific area?
Select an answer first - 8
A reliability engineer at a generation owner is inventorying cyber assets at a 500 MW combined-cycle plant. The plant's DCS includes a historian server that collects operational data from the unit's control system. The historian is not used for real-time control, but it provides data that operators use to make manual decisions about unit dispatch. The plant's owner has determined that the DCS is a BES Cyber System under the Moderate impact rating. Which of the following best describes whether the historian server should be categorized as a BES Cyber Asset?
Select an answer first - 9
A control center has a server that processes wide-area situational awareness data from synchrophasors. The server provides real-time voltage and angle information to operators. Which BES Reliability Operating Service does this server support?
Select an answer first - 10
When assessing the operational impact of a Cyber Asset, which of the following best describes the 'operational effects' that must be considered?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.