A utility is planning to build a new 345 kV transmission line that will connect two BES substations. The line will pass through a region with a high risk of physical attacks. The compliance team is evaluating the applicability of CIP-014. Which of the following is the most important consideration?

The new line is subject to CIP-014 only if it is located in a high-risk area.

The new line is automatically subject to CIP-014 because it is 345 kV.

The new line is exempt from CIP-014 because it is new construction.

The new line must be included in the next CIP-014 risk assessment to determine if it is a critical transmission station.

A utility has identified a set of cyber assets that are part of a BES Cyber System. The compliance manager is determining which assets are Critical Cyber Assets. Which factor is most important in this determination?

The asset's role in the reliable operation of the BES.

The asset's physical location within a secure facility.

The asset's cost and replacement value.

The asset's age and manufacturer.

A utility is implementing a new security program to comply with CIP standards. Which activity is most directly aligned with the purpose of the CIP standards?

Identifying and protecting cyber assets that are essential to the reliable operation of the BES.

Installing physical barriers and access controls around a substation.

Implementing a cybersecurity awareness training program for all employees.

Developing a public relations plan to communicate security efforts to customers.

In the context of NERC CIP, what is a Critical Asset?

Any asset that is connected to the internet and can be accessed remotely

Any asset that is owned by a utility and has a replacement value exceeding $1 million

Any asset that is located within a physical security perimeter

Any facility, system, or equipment that, if destroyed or compromised, could adversely impact the reliable operation of the Bulk Electric System

GIAC Critical Infrastructure Protection (GCIP)

Domain 1Objective 1

NERC CIP Terms and Definitions GCIP Practice Questions (Page 6)

Part of the Foundations and Governance domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 6–10 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 26–30

26application · medium
A compliance team is mapping their existing security controls to the NERC CIP standards. They have implemented access control, incident response, and recovery plans. Which CIP standard category do these controls primarily fall under?
Select an answer first
27expert · hard
A utility is planning to build a new 345 kV transmission line that will connect two BES substations. The line will pass through a region with a high risk of physical attacks. The compliance team is evaluating the applicability of CIP-014. Which of the following is the most important consideration?
Select an answer first
28expert · hard
A utility has identified a set of cyber assets that are part of a BES Cyber System. The compliance manager is determining which assets are Critical Cyber Assets. Which factor is most important in this determination?
Select an answer first
29application · medium
A utility is implementing a new security program to comply with CIP standards. Which activity is most directly aligned with the purpose of the CIP standards?
Select an answer first
30foundation · easy
In the context of NERC CIP, what is a Critical Asset?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.