CSL CSL Government & Critical Infrastructure Security Law 2

Question 1

The North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) standards are mandatory for electric utilities. Which federal agency enforces these standards?

Accepted Answer

FERC

Answer

The Federal Energy Regulatory Commission (FERC) has authority under the Energy Policy Act of 2005 to approve and enforce NERC CIP reliability standards for the bulk power system.

Question 2

Which provision of the National Defense Authorization Act (NDAA) addresses cybersecurity requirements for defense contractors handling Controlled Unclassified Information (CUI)?

Accepted Answer

DFARS 252.204-7012 and CMMC requirements

Answer

DFARS clause 252.204-7012 requires defense contractors to implement NIST SP 800-171 controls, with the Cybersecurity Maturity Model Certification (CMMC) program expanding and formalizing these requirements.

Question 3

Under the Federal Acquisition Regulation (FAR), a software vendor sells code to the government that contains a known vulnerability the vendor failed to disclose. This may constitute:

Accepted Answer

False Claims Act liability for false certification of security compliance

Answer

If a vendor falsely certifies compliance with cybersecurity requirements in a government contract, they may face liability under the False Claims Act, which provides treble damages.

Question 4

The TSA cybersecurity directives issued after the Colonial Pipeline attack apply to which sector and require what primary security measure?

Accepted Answer

Pipeline and rail sectors; network segmentation and incident reporting

Answer

TSA issued emergency cybersecurity directives to pipeline and surface transportation operators requiring network segmentation, cybersecurity coordinator designation, and CISA incident reporting.

Question 5

Under what authority does the President have the power to impose sanctions on foreign individuals and entities engaged in significant malicious cyber activities?

Accepted Answer

International Emergency Economic Powers Act (IEEPA) and Executive Order 13694

Answer

EO 13694 (amended by EO 13757) uses IEEPA authority to allow Treasury/OFAC to designate and sanction those responsible for significant malicious cyber-enabled activities.

(CSL) Cybersecurity Law Certification Practice Test

(CSL) Cybersecurity Law Certification Practice Test

CSL CSL Government & Critical Infrastructure Security Law 2