What is the primary purpose of the Reliability Standards Auditor Worksheet?

To replace the need for on-site audits

To allow entities to self-report compliance without auditor review

To provide a checklist for auditors to document evidence and assess compliance with reliability standards

To list all possible violations in the industry

An entity is preparing for a CIP audit and has discovered that some evidence for a requirement is missing because the system logs were overwritten. The entity has a compliance matrix that shows the evidence was previously collected. What is the best course of action?

Recreate the logs by simulating the previous activity.

Inform the auditor of the missing evidence and provide alternative evidence.

Blame the log retention policy and do nothing.

Hide the gap and hope the auditor does not notice.

A CIP compliance team is preparing for an upcoming audit. They have gathered evidence for each requirement, but the auditor has asked for a document that maps each CIP requirement to the specific evidence and the control owner responsible. Which document should the team prepare or update to directly address this request?

Reliability Standards Auditor Worksheet

What is the definition of interactive remote access in the context of CIP standards?

Any automated data exchange between two systems

A remote session where an individual actively communicates with a cyber asset and can make changes

Remote access that occurs only during business hours

Access to a system via a read-only monitoring tool

A utility is evaluating internal controls to ensure ongoing compliance with CIP standards. Which control is most effective for verifying that access rights to critical cyber assets remain appropriate?

Performing annual penetration tests.

Implementing a password policy requiring complex passwords.

Conducting quarterly access reviews.

Installing a firewall to segment the network.

GIAC Critical Infrastructure Protection (GCIP)

Domain 1Objective 2

Standards Enforcement GCIP Practice Questions (Page 8)

Part of the Foundations and Governance domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 6–10 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

6concepts

Questions 36–40

36foundation · easy
What is the primary purpose of the Reliability Standards Auditor Worksheet?
Select an answer first
37expert · hard
An entity is preparing for a CIP audit and has discovered that some evidence for a requirement is missing because the system logs were overwritten. The entity has a compliance matrix that shows the evidence was previously collected. What is the best course of action?
Select an answer first
38application · medium
A CIP compliance team is preparing for an upcoming audit. They have gathered evidence for each requirement, but the auditor has asked for a document that maps each CIP requirement to the specific evidence and the control owner responsible. Which document should the team prepare or update to directly address this request?
Select an answer first
39foundation · easy
What is the definition of interactive remote access in the context of CIP standards?
Select an answer first
40application · medium
A utility is evaluating internal controls to ensure ongoing compliance with CIP standards. Which control is most effective for verifying that access rights to critical cyber assets remain appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.