CIS-RC practice questions 191–200

1. Question 191 · 223 in bank

   What state do controls enter once all control attestations are completed?

   • AReview
   • BAttest
   • CDraft
   • DRetired
   • EMonitor

   Show answer

   Answer: A

   Next question

2. Question 192 · 223 in bank

   What is the minimum role required to create a new RAM?

   • Asn_risk_advanced.ara_assessor
   • Bsn_risk.manager
   • Csn_risk.user
   • Dsn_risk_advanced.ara_creator
   • Esn_risk_advanced.ara_admin

   Show answer

   Answer: E

   Next question

3. Question 193 · 223 in bank

   What circumstances will cause the Rollup Configuration options to only appear on a risk assessment methodology?

   • ARAM context is Risk
   • BRAM context is Entity
   • CRAM context is blank
   • DRAM context is Object

   Show answer

   Answer: A

   Next question

4. Question 194 · 223 in bank

   What happens if an entity is set to auto-update the owner value from the source record and the value on the source record field has been cleared?

   • AThe entity owner will be cleared
   • BThe entity owner will become the same as the control objective owner
   • CNothing, the entity owner will remain
   • DThe entity owner will become the default owner defined in the entity filter

   Show answer

   Answer: C

   Next question

5. Question 195 · 223 in bank

   What must an implementer configure to allow users to submit a policy exception from a GRC application?

   • AIntegration registry
   • BNothing is required
   • CException questionnaire
   • DVerification rules
   • EApproval rules
   • FException risk rules

   Show answer

   Answer: C

   Next question

6. Question 196 · 223 in bank

   What risk appetite definitions are configurable versus customizable?

   • AAppetite scales
   • BTolerance scales
   • CAppetite status
   • DAppetite roles
   • ETolerance status

   Show answer

   Answer: A

   Next question

7. Question 197 · 223 in bank

   Select 2

   Who can request approval for a policy? (Choose two.)

   • APolicy owner
   • BPolicy requester
   • CCompliance manager
   • DAudit manager
   • ERisk manager
   • FPolicy contributor

   Show answer

   Answer: AB

   Next question

8. Question 198 · 223 in bank

   What user interface is required to utilize the updated issue data model which allows an issue to be related to multiple risks, controls and entities?

   • ACRC workspace
   • BCompliance workspace
   • CPlatform User Interface
   • DService Operations workspace

   Show answer

   Answer: A

   Next question

9. Question 199 · 223 in bank

   What is the overall goal of entity classes?

   • ATo provide specific information about an Entity, such as who owns the Entity
   • BSlow relationships between Entities and policies and map them directly to Citations
   • CTo enable reporting and to support advance risk assessment
   • DAssociate Control Objectives and Risk Statements with Risks and Controls

   Show answer

   Answer: C

   Next question

10. Question 200 · 223 in bank

    In the Technology Controls content pack, some of the indicator templates are related to the ISO 27002 regulation. What field connects the indicator templates to the regulation?

    • AISO 27002 Control Objective ID
    • BISO 27002 Citation ID
    • CRelated source IDs
    • DUCF Content Reverence ID

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIS-RC practice, question 191. 223 questions available.