A large investor-owned utility operates in multiple regions and is registered with NERC. The utility is facing a potential violation of a CIP standard. Which entity has the authority to levy a penalty for the violation?

NERC only, as the sole enforcement authority.

The state public utility commission, because the utility operates within its state.

The regional entity with delegated authority from NERC, subject to NERC and FERC oversight.

FERC directly, without any involvement from NERC or regional entities.

Which of the following best defines a Critical Cyber Asset (CCA) under NERC CIP?

Any computer system that is connected to the corporate network of a utility

A cyber asset that supports the reliable operation of the Bulk Electric System and is associated with a Critical Asset

Any software application that is used for billing or customer management

Any cyber asset that has been compromised by a malicious actor in the past

A transmission owner is performing a risk assessment to identify Critical Cyber Assets (CCAs) as part of its CIP compliance program. Which asset should be classified as a Critical Cyber Asset?

A workstation used by engineers to access the corporate email system.

A laptop used by a contractor to review maintenance procedures while on site.

A server that hosts the utility's public website.

A protective relay that monitors and trips a 230 kV transmission line when a fault is detected.

According to NERC's definition, which of the following best describes the Bulk Electric System (BES)?

The portion of the electric grid that operates at 200 kV and above, including all substations and control centers

The interconnected electrical generation and transmission system, including associated facilities, subject to NERC reliability standards

Only the generating stations and high-voltage transmission lines owned by vertically integrated utilities in North America

All generation, transmission, and distribution facilities operating at 100 kV or higher, including associated protection and control equipment

A small generation cooperative is considering whether to register with NERC. The cooperative operates a 50 MW natural gas plant that is connected to the transmission system. Which consideration is most relevant to the registration decision?

The plant's location, because only plants in certain regions are required to register.

The plant's connection to the BES and its potential impact on reliability.

The plant's fuel type, because natural gas plants are exempt from registration.

The plant's size, because only plants above 100 MW are required to register.

GIAC Critical Infrastructure Protection (GCIP)

Domain 1Objective 1

NERC CIP Terms and Definitions GCIP Practice Questions (Page 2)

Part of the Foundations and Governance domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 6–10 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 6–10

6expert · hard
A large investor-owned utility operates in multiple regions and is registered with NERC. The utility is facing a potential violation of a CIP standard. Which entity has the authority to levy a penalty for the violation?
Select an answer first
7foundation · easy
Which of the following best defines a Critical Cyber Asset (CCA) under NERC CIP?
Select an answer first
8application · medium
A transmission owner is performing a risk assessment to identify Critical Cyber Assets (CCAs) as part of its CIP compliance program. Which asset should be classified as a Critical Cyber Asset?
Select an answer first
9foundation · easy
According to NERC's definition, which of the following best describes the Bulk Electric System (BES)?
Select an answer first
10expert · hard
A small generation cooperative is considering whether to register with NERC. The cooperative operates a 50 MW natural gas plant that is connected to the transmission system. Which consideration is most relevant to the registration decision?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.