What is the purpose of evaluating internal controls in the context of CIP compliance?

To eliminate the need for external audits

To determine whether the entity's processes are effective in maintaining compliance

To assign blame for past violations

To prove that the entity is always compliant

Why is interactive remote access specifically addressed in CIP compliance monitoring?

Because it introduces a higher risk of unauthorized changes or malicious activity

Because it is the only way to access cyber assets

Because it is required for all CIP compliance audits

Because it eliminates the need for multi-factor authentication

A registered entity has experienced a compliance violation due to a misconfigured firewall that was not detected by their internal controls. The entity has a history of minor violations but has always cooperated with investigators. The compliance officer is preparing a response to the enforcement team. Which factor is most likely to influence the severity of the penalty?

The number of employees in the IT department

The weather on the day of the violation

The color of the firewall vendor's logo

The entity's history of violations and cooperation with investigators

An auditor is using the Reliability Standards Auditor Worksheet to assess a complex CIP requirement that involves multiple controls. The worksheet has a section for each control, but the auditor is unsure how to document evidence that applies to multiple controls. What is the best practice?

Create a separate evidence log outside the worksheet.

Only document the evidence in the first section and ignore the others.

Duplicate the evidence in each relevant section of the worksheet.

Reference the evidence in one section and cross-reference it in others.

What is a primary goal of the Reliability Assurance Initiative (RAI)?

To shift compliance monitoring from a checklist-based approach to a risk-based, data-driven approach

To transfer compliance responsibility to the federal government

To eliminate all compliance audits

To increase the number of mandatory audits for all entities

GIAC Critical Infrastructure Protection (GCIP)

Domain 1Objective 2

Standards Enforcement GCIP Practice Questions (Page 3)

Part of the Foundations and Governance domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 6–10 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

Questions 11–15

11foundation · easy
What is the purpose of evaluating internal controls in the context of CIP compliance?
Select an answer first
12foundation · easy
Why is interactive remote access specifically addressed in CIP compliance monitoring?
Select an answer first
13expert · hard
A registered entity has experienced a compliance violation due to a misconfigured firewall that was not detected by their internal controls. The entity has a history of minor violations but has always cooperated with investigators. The compliance officer is preparing a response to the enforcement team. Which factor is most likely to influence the severity of the penalty?
Select an answer first
14expert · hard
An auditor is using the Reliability Standards Auditor Worksheet to assess a complex CIP requirement that involves multiple controls. The worksheet has a section for each control, but the auditor is unsure how to document evidence that applies to multiple controls. What is the best practice?
Select an answer first
15foundation · easy
What is a primary goal of the Reliability Assurance Initiative (RAI)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.