CIS-RC practice questions 111–120

1. Question 111 · 223 in bank

   Controls are generated from a Control Objective when what is applied to it?

   • APolicy
   • BCitation
   • CIndicator template
   • DEntity Type

   Show answer

   Answer: D

   Next question

2. Question 112 · 223 in bank

   In which state is the Policy once all approvals are received?

   • AReview
   • BPublished
   • CDraft
   • DRetired
   • EAwaiting Approval

   Show answer

   Answer: B

   Next question

3. Question 113 · 223 in bank

   Select 3

   Which GRC tables serve as primary parent tables for the GRC applications? (Choose three.)

   • AContent
   • BItem
   • CAsset
   • DTask
   • EDocument

   Show answer

   Answer: ABE

   Next question

4. Question 114 · 223 in bank

   Select 2

   Setting up entity classes is required when using which GRC features? (Choose two.)

   • ASetting up an object-based risk assessment
   • BAdding to the policy exception integration registry
   • CAssessing the impact of a regulatory feed
   • DLeveraging classic risk assessments
   • ELeveraging advanced risk assessments

   Show answer

   Answer: AE

   Next question

5. Question 115 · 223 in bank

   Select 3

   For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)

   • AControls are identified from library and ad-hoc
   • BControls are identified from indicator results
   • CControls are identified from library
   • DControls are identified ad-hoc
   • EControls are identified from related issues

   Show answer

   Answer: ACD

   Next question

6. Question 116 · 223 in bank

   Annualized Loss Expectancy is a feature of which risk score method?

   • AResidual
   • BQuantitative
   • CQualitative
   • DInherent

   Show answer

   Answer: B

   Next question

7. Question 117 · 223 in bank

   Within the Policy Acknowledgement module, what table does the Acknowledgement Instance table extend from?

   • ATask
   • BPolicy Acknowledgement
   • CDoes not extend from a table
   • DPolicy
   • EDocument

   Show answer

   Answer: C

   Next question

8. Question 118 · 223 in bank

   Select 2

   For advanced risk assessment, risk response can be handled in the following ways: (Choose two.)

   • ACreate multiple risk response tasks
   • BSkipped entirely based on attributes defined in the RAM
   • CMust create a mitigation response task
   • DMust create at least one risk response task

   Show answer

   Answer: AB

   Next question

9. Question 119 · 223 in bank

   Select 3

   What assessment types can be enabled when configuring a risk assessment methodology (RAM)? (Choose three.)

   • AOperational Risk Assessment
   • BApplication Risk Assessment
   • CResidual Assessment
   • DInherent Assessment
   • EControl Assessment
   • FProject Risk Assessment

   Show answer

   Answer: CDE

   Next question

10. Question 120 · 223 in bank

    How does GRC: Policy and Compliance Management track compliance to Authority Documents?

    • ACitations are mapped to entity-scoped controls, which are tested as compliant or non-compliant.
    • BAuthority Documents are mapped to individual policies, which are either marked compliant or non-compliant.
    • CAuthority Documents are mapped to control objectives and compliance is checked when controls are tested as compliant or non-compliant.
    • DCitations are mapped to control objectives, and compliance is checked when controls are tested as compliant or non-compliant.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIS-RC practice, question 111. 223 questions available.