NERC CIP Terms and Definitions GCIP Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A renewable developer is building a 150 MW solar farm that interconnects to a 230 kV transmission line. The facility includes a 34.5 kV collector system that gathers power from inverters and steps up to 230 kV. The developer is determining which parts of the facility are subject to NERC CIP. Which of the following is correct?

   • AThe 34.5 kV collector system is part of the BES because it is necessary for the solar farm to generate power.
   • BThe solar farm's generation resource and the step-up transformer are part of the BES, but the 34.5 kV collector system is excluded as local distribution.
   • COnly the 230 kV transmission line is part of the BES; the solar farm and collector system are excluded because they are generation.
   • DThe entire facility, including the 34.5 kV collector system, is part of the BES because it is a generation resource.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A compliance team is deciding how to allocate limited resources to meet CIP requirements. They must choose between implementing a new security information and event management (SIEM) system for cyber security monitoring and upgrading physical access controls at a substation. Which approach best aligns with the overall purpose of the CIP standards?

   • ADefer both until the next compliance audit to save costs.
   • BPrioritize the physical access controls because physical security is the foundation of all security.
   • CPrioritize the SIEM system because cyber security is more important than physical security.
   • DImplement both, but phase them based on a risk assessment that considers the specific threats and vulnerabilities.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the primary purpose of the NERC Critical Infrastructure Protection (CIP) standards?

   • ATo establish safety standards for workers who perform maintenance on high-voltage equipment
   • BTo ensure that all electric utilities generate a minimum amount of renewable energy
   • CTo secure the cyber and physical assets that are critical to the reliable operation of the Bulk Electric System
   • DTo regulate the wholesale electricity market and prevent price manipulation
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A transmission owner is implementing a new cybersecurity program for its control center. The compliance lead explains that the program must align with NERC CIP standards. Which statement best describes the purpose of the CIP standards?

   • AThey establish a common set of cybersecurity and physical security requirements to protect assets critical to the reliable operation of the BES.
   • BThey provide voluntary best practices for improving IT security in corporate networks that are not connected to the BES.
   • CThey define performance metrics for generation efficiency and emissions reduction at BES facilities.
   • DThey specify the exact hardware and software products that must be used for all BES cyber systems.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the role of the Federal Energy Regulatory Commission (FERC) in relation to NERC CIP standards?

   • AFERC has no role in the enforcement of NERC CIP standards
   • BFERC approves and enforces NERC reliability standards, including CIP standards, for the United States
   • CFERC is responsible for auditing utilities for CIP compliance in Canada
   • DFERC develops and writes all NERC CIP standards independently
   Reveal Solution Discussion Select an answer first