Certified Implementation Specialist - Risk and Compliance

Question 1

What would you leverage in order to provide users with an alternate user experience to view policies, create policy exceptions, and search for controls?

A. Access Portal

B. Help Desk Portal

C. Catalog Portal

D. Service Portal

Correct Answer: C

Question 2

Which of the following extends from items?

A. Citation

B. Issue

C. Controls

D. Policy

Correct Answer: D

Question 3

Which indicator type uses platform automation to collect records for continuous monitoring?

A. Manual

B. Automate

C. Scripted

D. Basic

Correct Answer: B

Question 4

What term might a customer compliance manager use for a control objective?
Choose 2 answers

A. Policy statement

B. Control Finding

C. Control Object

D. control Entity

E. Control Template

Correct Answer: A,B,E

Question 5

The SOX content pack includes a series of policies, control, risks. How are all of these components linked together?

A. Manually

B. Mapping File

C. Batch import

D. Automatically

Correct Answer: D

Question 6

What happens when you assign an Entity Type to a Risk Statement?

A. A risk assessment is created automatically for every Entity listed in the Entity Type

B. An assessment will be automatically generated to test each Entity listed in the Entity Type

C. The Entity is now going to present a risk score and controls are going to be tied to it

D. A risk is automatically generated for every Entity listed in the Entity Type

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Praveen is a Risk Manager. Why would he want to utilize Entity Types and Entities? (Choose three.)

A. To monitor risk exposure

B. To perform policy exceptions

C. To perform risk reporting

D. To perform risk assessments

E. To remediate vulnerabilities

Correct Answer: A,B,D

Question 8

What would you use in order to accommodate a customer's unique process around policy approvals? For example, each policy needs a second layer of approval.

A. Create a new workflow in the workflow editor

B. Create a new field and create notifications

C. Add a new related list to keep track of who has already approved it and who hasn't approved yet

D. Add a UI Action to track who the stakeholders are

Correct Answer: B

Question 9

Which of the following is the correct statement about Risk Scoring formulas?

A. Impact × Urgency = ALE

B. SLE × ARO = ALE

C. ALE × ARO = SLE

D. ALE × ARO = Compliance Score

Correct Answer: C

Question 10

Which table stores the links from the Entity Type to Risk Statement?

A. [sn_risk_m2m_framework_profile_type]

B. [sn_risk_m2m_statement_profile_type]

C. [sn_risk_m2m_risk_definition_profile_type]

D. [sn_risk_m2m_policy_profile_type]

Correct Answer: B,C

Question 11

Why would you create Entity classes?

A. To show relationships between tables or objects you are tracking that doesn't otherwise exist anywhere in ServiceNow

B. To show relationships between Entities and Policies and map them directory to Citations

C. To be assigned to risk statements, which generate risks for every Entity listed in the Entity Class

D. To be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 12

What is a risk register?

A. Repository for risk statements

B. Repository for risk frameworks

C. Repository for all unidentified risks

D. Repository for all identified risks

E. Repository for risk criteria

Correct Answer: D

Question 13

Entities can belong 10 more than one of this classification. What is the classification?

A. Entity classes

B. Entity types

C. information objects

D. Departments

Correct Answer: B

Question 14

Which table stored the links from Entity to Entity Types?

A. [sn_risk_m2m_risk_profile]

B. [sn_compliance_m2m_policy_profile]

C. [sn_grc_m2m_profile_profile_type]

D. [sn_compliance_m2m_profile_profile_type]

Correct Answer: D

ServiceNow Certified Implementation Specialist - Risk and Compliance - CIS-RCI Exam Practice Test

Latest Update

Useful Links

Contact Us