NERC CIP Terms and Definitions GCIP Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A large utility operates in both the United States and Mexico, with assets in the Texas Interconnection and the Western Interconnection. The compliance team is developing a unified CIP compliance program. Which of the following is the most significant challenge they must address?

   • AThe Texas Interconnection is not subject to FERC jurisdiction, so the utility must follow different standards there.
   • BDifferent regional entities have different enforcement priorities, so the utility must prepare for multiple audit styles.
   • CThe utility must obtain separate NERC registrations for each interconnection.
   • DThe utility must comply with NERC standards in the United States and also with Mexican regulatory requirements for assets in Mexico.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A regional transmission organization (RTO) is reviewing its compliance enforcement procedures. Which statement correctly describes the relationship between NERC, FERC, and regional entities?

   • ARegional entities can appeal FERC decisions directly to the courts without NERC involvement.
   • BRegional entities have the authority to create their own reliability standards without NERC approval.
   • CFERC directly audits each registered entity for compliance with NERC standards.
   • DNERC develops standards, FERC approves them, and regional entities enforce them.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A compliance manager is organizing the NERC CIP standards into categories for a training presentation. Which of the following groupings correctly reflects the major categories of CIP standards?

   • APersonnel, training, and auditing security.
   • BSecurity management, physical security, and cyber security.
   • CPrevention, detection, and response security.
   • DGeneration, transmission, and distribution security.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A new compliance analyst asks how NERC CIP standards become mandatory and how they are enforced. Which statement correctly explains the regulatory framework?

   • ANERC standards are voluntary until a regional entity adopts them, and then they are enforced by state utility commissions.
   • BRegional entities develop standards, NERC approves them, and FERC enforces them through civil penalties.
   • CFERC writes the standards and delegates enforcement to NERC, which conducts all audits directly.
   • DNERC standards become mandatory after FERC approves them, and regional entities enforce them through audits and penalties.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A utility is facing a potential violation of a NERC CIP standard. The compliance team is evaluating options for responding. Which of the following is the most appropriate first step?

   • AContact FERC directly to negotiate a settlement before the regional entity is notified.
   • BWait for the regional entity to discover the violation during the next audit.
   • CConceal the violation until it can be fixed and hope it is not discovered.
   • DImmediately self-report the violation to the regional entity and begin corrective actions.
   Reveal Solution Discussion Select an answer first