Standards Enforcement GCIP Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   An auditor is using the Reliability Standards Auditor Worksheet during a compliance assessment. How does this worksheet support the audit process?

   • AIt is used only for internal audits, not external ones.
   • BIt provides a standardized template for documenting evidence and findings.
   • CIt automatically generates the final compliance report.
   • DIt replaces the need for interviews with personnel.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A compliance team is preparing for an audit and has completed the Reliability Standards Auditor Worksheet. However, they realize that some evidence is missing for a few requirements. The auditor is scheduled to arrive in two days. What is the best course of action?

   • AHide the missing evidence and hope the auditor does not notice
   • BCancel the audit and reschedule for a later date
   • CInform the auditor in advance about the missing evidence and provide a plan to obtain it
   • DFabricate evidence to fill the gaps
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A compliance team is preparing for an audit and has limited time. They have completed the Reliability Standards Auditor Worksheet, but they have not yet collected evidence for interactive remote access sessions. The auditor has requested evidence for the past 12 months. What is the most efficient way to gather this evidence?

   • AManually recreate the sessions from memory
   • BProvide a summary of remote access procedures without logs
   • CAsk the auditor to waive this requirement
   • DExtract logs from the remote access system for the past 12 months and correlate them with the worksheet
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is a potential penalty for non-compliance with NERC CIP standards?

   • AA monetary penalty per day per violation
   • BMandatory public apology
   • CForfeiture of all physical assets
   • DAutomatic loss of all cyber asset inventories
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A CIP compliance team is preparing for an audit with limited staff and time. They must provide evidence for multiple requirements, but they have not yet mapped evidence to requirements. Which approach best balances thoroughness and efficiency?

   • ADelay the audit until more staff are available.
   • BCollect all possible evidence and let the auditor sort it out.
   • CPrioritize evidence collection for high-risk requirements and create a compliance matrix for those.
   • DSubmit a self-certification letter instead of evidence.
   Reveal Solution Discussion Select an answer first