GIAC Critical Infrastructure Protection - GCIP Exam Practice Test
You have been tasked with updating the security management controls for a BES Cyber System. Several security incidents have occurred recently, and your job is to enhance controls to prevent future breaches. What steps should you prioritize?
(Select three)
Response:
(Select three)
Response:
Correct Answer: A,B,C
Vote an answer
You manage a system that includes multiple BES Cyber Assets connected via an ESP. Recently, an employee left the company without deactivating their account. To maintain compliance with NERC CIP, what immediate actions should be taken?
(Select three)
Response:
(Select three)
Response:
Correct Answer: A,D,E
Vote an answer
The documentation of recovery procedures helps to:
Response:
Response:
Correct Answer: D
Vote an answer
Which of the following is NOT typically part of an ESP for BES Cyber Assets?
Response:
Response:
Correct Answer: B
Vote an answer
Why is configuration change management essential in BES Cyber Systems?
Response:
Response:
Correct Answer: A
Vote an answer
How are violations of NERC CIP standards typically addressed?
Response:
Response:
Correct Answer: A
Vote an answer
Which two practices are essential in maintaining security management controls for BES Cyber Systems?
Response:
Response:
Correct Answer: B,C
Vote an answer
A vulnerability assessment has identified a weakness in a critical BES Cyber System. The system is used to control energy distribution and must be kept secure. What steps should be prioritized to mitigate this vulnerability while minimizing downtime?
(Select three)
Response:
(Select three)
Response:
Correct Answer: B,C,D
Vote an answer
What is the first step in establishing an Information Protection Program?
Response:
Response:
Correct Answer: A
Vote an answer
What does the term "Bulk Electric System" (BES) refer to?
Response:
Response:
Correct Answer: B
Vote an answer
In standards development, stakeholder engagement is crucial for:
Response:
Response:
Correct Answer: D
Vote an answer
How should training effectiveness be assessed in the context of NERC CIP?
Response:
Response:
Correct Answer: C
Vote an answer
Standards in NERC CIP should be developed with a focus on:
Response:
Response:
Correct Answer: C
Vote an answer
What is the significance of categorizing BES Cyber Systems?
Response:
Response:
Correct Answer: A
Vote an answer