GCIP by GIAC Actual Free Exam Q&As

Question 1

Testing physical security systems is essential to:
Response:

A. Comply with interior design standards B. Demonstrate the facility to stakeholders C. Facilitate insurance certifications D. Ensure they function effectively during actual incidents

Discussion 0

Correct Answer: D Vote an answer

Question 2

Which two activities are critical during the incident reporting process for BES Cyber Systems?
Response:

A. Documenting the timeline of events B. Ignoring minor security breaches C. Informing all employees, regardless of their role D. Notifying regulatory bodies as required

Discussion 0

Correct Answer: A,D Vote an answer

Question 3

The role of physical security in a comprehensive cybersecurity strategy is to:
Response:

A. Provide a welcoming environment for guests B. Ensure that cyber assets have robust physical defenses C. Create a relaxing atmosphere for employees D. Decorate the facility with modern art

Discussion 0

Correct Answer: B Vote an answer

Question 4

Which of the following methods is most effective for protecting BES-related information during disposal?
Response:

A. Leaving the documents in public areas B. Shredding physical documents C. Reusing the information for future projects D. Emailing sensitive data to external stakeholders

Discussion 0

Correct Answer: B Vote an answer

Question 5

Effective system security management includes:
Response:

A. Curating an office music playlist B. Patch management and vulnerability assessments C. Themed user interfaces for each season D. Designing ergonomic workspaces

Discussion 0

Correct Answer: B Vote an answer

Question 6

Effective security management controls should include:
Response:

A. Periodic review and update of cybersecurity policies B. Annual company retreats C. Regular coffee breaks D. Employee birthday celebrations

Discussion 0

Correct Answer: A Vote an answer

Question 7

How often should vulnerability assessments be conducted on BES Cyber Systems?
Response:

A. Bi-annually, regardless of external factors B. Once every five years C. At a frequency determined by the system's risk assessment D. Only after a security incident

Discussion 0

Correct Answer: C Vote an answer

Question 8

Why is it important to document recovery procedures for BES Cyber Systems?
Response:

A. To improve company branding B. To facilitate office redesigns C. To create marketing material D. To ensure that all staff can quickly follow a standardized process during recovery

Discussion 0

Correct Answer: D Vote an answer

Question 9

What is the purpose of a Request for Interpretation (RFI) in NERC CIP standards development?
Response:

A. To provide social media updates B. To request changes to the company vacation policy C. To promote office cleanliness D. To clarify and interpret the applicability of specific standards

Discussion 0

Correct Answer: D Vote an answer

Question 10

What consequence can result from under-categorizing a BES Cyber System?
Response:

A. Increased operational efficiency. B. Insufficient protection measures. C. Over-allocation of resources. D. Enhanced system performance.

Discussion 0

Correct Answer: B Vote an answer

Question 11

How often should an Incident Response Plan be tested for BES Cyber Systems under NERC CIP standards?
Response:

A. Annually B. Only after an incident occurs C. Monthly D. Every five years

Discussion 0

Correct Answer: A Vote an answer

Question 12

A critical component of standards enforcement is:
Response:

A. Ensuring that violations are identified and addressed B. Organizing monthly fashion events C. Providing clear and concise decoration guidelines D. Coordinating with local artists

Discussion 0

Correct Answer: A Vote an answer

GIAC Critical Infrastructure Protection - GCIP Exam Practice Test