NERC NERC Critical Infrastructure Protection (CIP) 2

Question 1

What is the Electronic Security Perimeter (ESP) as defined under NERC CIP?

Accepted Answer

The logical border surrounding a network to which BES Cyber Systems are connected

Answer

An ESP is the logical border surrounding a network to which BES Cyber Systems are connected and requiring controlled access.

Question 2

Under CIP-007, how frequently must responsible entities review or update ports and services on BES Cyber Systems?

Accepted Answer

At least once every 15 calendar months

Answer

CIP-007 requires review of ports and services at least once every 15 calendar months to disable unnecessary ports.

Question 3

Which impact level classification under NERC CIP carries the most stringent security requirements?

Accepted Answer

High impact

Answer

High impact BES Cyber Systems face the most stringent CIP requirements, including controls for all applicable CIP standards.

Question 4

What does NERC CIP-005 govern?

Accepted Answer

Electronic security perimeters and remote access management

Answer

CIP-005 requires responsible entities to define and manage Electronic Security Perimeters and control remote access to BES Cyber Systems.

Question 5

A 'Transient Cyber Asset' under CIP-010 is best described as:

Accepted Answer

A cyber asset that is temporarily connected to a BES Cyber System for 30 or fewer consecutive days

Answer

A Transient Cyber Asset is one connected temporarily (30 or fewer consecutive days per calendar year) to a BES Cyber System.

NERC - North American Electric Reliability Corporation Practice Test