GCIP試験無料問題集（180題）「GIAC Critical Infrastructure Protection 認定」

出題：1

How does a Dial-Up connection impact an ESP under NERC CIP?
Response:

A. It bypasses normal security procedures

B. It requires specific access controls due to its security vulnerabilities

C. It is exempt from CIP standards

D. It automatically improves the security of the ESP

正解：B 解答を投票する

出題：2

Effective communication during the recovery phase should:
Response:

A. Ensure that all stakeholders are informed of recovery progress

B. Feature updates on office decor

C. Focus on promoting the company's brand

D. Highlight employee birthdays and anniversaries

正解：A 解答を投票する

出題：3

Why is patch management important in system security management?
Response:

A. It improves employee morale

B. It ensures systems are protected against known vulnerabilities

C. It increases system performance

D. It reduces the workload for IT staff

正解：B 解答を投票する

出題：4

Which two measures are essential for ensuring the physical security of BES Cyber Systems?
Response:

A. Allowing employees to bypass security protocols

B. Installing surveillance systems

C. Implementing a visitor control program

D. Providing open access to the public for educational purposes

正解：B,C 解答を投票する

出題：5

How do visitor management protocols contribute to the physical security of BES Cyber Systems?
Response:

A. They offer networking opportunities for staff

B. They provide a marketing opportunity for the facility

C. They track visitor movement and restrict access to sensitive areas

D. They ensure all visitors are entertained

正解：C 解答を投票する

出題：6

An effective Incident Response Plan should be tested through:
Response:

A. Annual employee performance reviews

B. Comprehensive tabletop exercises

C. Stakeholder interviews

D. Regular software updates

正解：B 解答を投票する

出題：7

Which two steps should be taken during a configuration change process to ensure system security?
Response:

A. Allow temporary access to all users

B. Document all changes

C. Conduct vulnerability assessments only after a major incident

D. Review the changes with the security team

正解：B,D 解答を投票する

出題：8

Why is it important to document recovery procedures for BES Cyber Systems?
Response:

A. To ensure that all staff can quickly follow a standardized process during recovery

B. To facilitate office redesigns

C. To create marketing material

D. To improve company branding

正解：A 解答を投票する

出題：9

How do security management controls assist in incident detection?
Response:

A. By ensuring all employees participate in annual talent shows

B. By defining processes and tools for monitoring and alerting

C. By creating a more relaxed work environment

D. By decorating the office with themed security posters

正解：B 解答を投票する

出題：10

A vulnerability assessment has identified a weakness in a critical BES Cyber System. The system is used to control energy distribution and must be kept secure. What steps should be prioritized to mitigate this vulnerability while minimizing downtime?
(Select three)
Response:

A. Apply a patch to address the vulnerability immediately

B. Disable the system until a new vulnerability scan is conducted

C. Conduct a risk assessment to evaluate the potential impact of the vulnerability

D. Notify the security team and management

E. Implement a temporary control measure if the patch cannot be applied immediately

正解：A,D,E 解答を投票する

GCIP試験無料問題集「GIAC Critical Infrastructure Protection 認定」