CIS-RC practice questions 151–160

1. Question 151 · 223 in bank

   What is the minimum role required to approve a Policy?

   • Asn_grc admin
   • Bsn_compliance manager
   • Csn_compliance user
   • Dsn_grc user

   Show answer

   Answer: C

   Next question

2. Question 152 · 223 in bank

   All of the following are tables which exist within the GRC Profiles application scope EXCEPT:

   • Asn_grc_profile
   • Bsn_grc_item
   • Csn_grc_profile_type
   • Dsn_grc_risk

   Show answer

   Answer: D

   Next question

3. Question 153 · 223 in bank

   The compliance score calculation may be modified by changing which control factor?

   • AControl Height
   • BControl Mass
   • CControl Velocity
   • DControl Weight

   Show answer

   Answer: D

   Next question

4. Question 154 · 223 in bank

   Select 3

   Which of the following tables are included in the GRC: Policy and Compliance Management scoped application? (Choose three.)

   • Asn_compliance_risk
   • Bsn_compliance_policy
   • Csn_grc_item
   • Dsn_compliance_policy_statement
   • Esn_grc_m2m_audience_user
   • Fsn_grc_entity_type
   • Gsn_compliance_citation

   Show answer

   Answer: BDG

   Next question

5. Question 155 · 223 in bank

   What is the Risk likelihood called when using the Quantitative method?

   • ALikelihood
   • BCalculated Score
   • CSingle Loss Expectancy (SLE)
   • DAnnualized Rate of Occurrence (ARO)

   Show answer

   Answer: D

   Next question

6. Question 156 · 223 in bank

   Select 3

   Which tables in the GRC: Profiles scope are parent tables for GRC: Risk Management tables? (Choose three.)

   • AItem
   • BTask
   • CContent
   • DProfile
   • EDocument

   Show answer

   Answer: ACE

   Next question

7. Question 157 · 223 in bank

   Select 2

   How can a user respond to consolidated (grouped) attestations? (Choose two.)

   • ACreate subgroups for responding with same or different responses
   • BProvide response using a baseline template for grouped attestations
   • CProvide different responses for each assessment
   • DProvide same response for all assessments
   • EProvide entity class responses within the same grouping

   Show answer

   Answer: CD

   Next question

8. Question 158 · 223 in bank

   Why would a company need to comply with the General Data Protection Regulation?

   • AIt stores credit card information
   • BIt faces the most pervasive cyber-threats
   • CIt processes data from individuals in the European Union
   • DIt is publicly traded in the United States

   Show answer

   Answer: C

   Next question

9. Question 159 · 223 in bank

   Select 3

   Why is Entity scoping important when implementing GRC? (Choose three.)

   • AAuto-generates controls when control objective is scoped with entity type
   • BProvides a consistent approach to setting up risks and controls
   • CAllows identification of both a technical owner and a business owner
   • DDynamic in nature. As new records meet criteria, they will be added as entities
   • EProvides a consistent approach to issue tracking

   Show answer

   Answer: ABD

   Next question

10. Question 160 · 223 in bank

    What is a risk register?

    • ARepository for all unidentified risks
    • BRepository for risk frameworks
    • CRepository for risk assessments
    • DRepository for all identified risks
    • ERepository for risk criteria

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIS-RC practice, question 151. 223 questions available.