Standards Enforcement GCIP Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   During a compliance assessment, how is the Reliability Standards Auditor Worksheet typically used?

   • AAs a public document that entities must complete and submit annually
   • BAs a scoring system that assigns a numerical grade to the entity
   • CAs a substitute for the entity's own compliance documentation
   • DAs a guide for the auditor to record evidence and determine compliance for each requirement
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A reliability coordinator is implementing the Reliability Assurance Initiative (RAI) and wants to focus on areas where entities are most likely to have compliance gaps. Which data source would be most valuable for this proactive approach?

   • AHistorical compliance audit findings
   • BReal-time operational data and self-reported information
   • COnly the entity's internal audit reports
   • DPublic news reports about the entity
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A compliance analyst is reviewing remote access logs and finds a session where an automated script is transferring files to a BES Cyber System. The analyst is unsure whether this session should be classified as interactive remote access. Which factor is most important in making this determination?

   • AThe session is logged in the system's audit log
   • BThe session is initiated by an automated script, not a human user
   • CThe session uses a secure file transfer protocol
   • DThe session originates from an external IP address
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A CIP compliance analyst is reviewing remote access logs and notices that a vendor connected to a critical cyber asset and executed commands interactively. Why is this type of access specifically relevant to CIP compliance monitoring?

   • AInteractive remote access is only relevant if it occurs during business hours.
   • BInteractive remote access requires stronger authentication and monitoring controls under CIP.
   • CInteractive remote access is prohibited by all CIP standards.
   • DInteractive remote access is automatically logged and does not need additional monitoring.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A CIP compliance team is configuring logging for remote access to critical cyber assets. Which type of access requires the most detailed logging and monitoring?

   • AInteractive remote access by an administrator.
   • BRead-only access to a monitoring dashboard.
   • CAccess from a vendor's support portal.
   • DAutomated file transfer between systems.
   Reveal Solution Discussion Select an answer first