CIS-RC practice questions 21–30

1. Question 21 · 223 in bank

   Select 3

   You are working with your customer to determine necessary audit management workflow configurations. What should they know about the approval process for audit engagements? (Choose three.)

   • AIf the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.
   • BIf the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.
   • CIf the engagement is rejected, it automatically moves back to the Fieldwork state.
   • DIf the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.
   • EIf the engagement is rejected, it automatically moves into the Scope state.

   Show answer

   Answer: ABC

   Next question

2. Question 22 · 223 in bank

   Select 2

   What are the Risk Scoring methods available in ServiceNow? (Choose two.)

   • AQuantitative
   • BQualitative
   • CInherent
   • DResidual
   • ECalculated

   Show answer

   Answer: AB

   Next question

3. Question 23 · 223 in bank

   The Risk thresholds in the Risk Criteria Matrix (default values) do not line up with company needs. What should you do?

   • AConfigure the Risk Criteria in ServiceNow
   • BIdentify Risk that will benefit from the default values
   • CDemonstrate Risk scoring scenarios using the default values
   • DUse the default values to determine new company approach

   Show answer

   Answer: A

   Next question

4. Question 24 · 223 in bank

   Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?

   • AAudit Management
   • BRisk Management
   • CVendor Risk Management
   • DPolicy and Compliance Management

   Show answer

   Answer: A

   Next question

5. Question 25 · 223 in bank

   Control Failure Factor represents the impact of Control Failures on what score?

   • AInherent
   • BResidual
   • CTotal
   • DCalculated

   Show answer

   Answer: D

   Next question

6. Question 26 · 223 in bank

   The Citation table is a child table of which parent?

   • AContent
   • BAuthority Document
   • CItem
   • DDocument

   Show answer

   Answer: A

   Next question

7. Question 27 · 223 in bank

   Select 2

   Who can move a Policy into Review? (Choose two.)

   • Asys admin
   • Bpolicy approver
   • Cpolicy reviewer
   • Dpolicy owner

   Show answer

   Answer: AD

   Next question

8. Question 28 · 223 in bank

   Which one of the following is not a trigger for issue creation?

   • AManual issue created by any manager or admin role as well as by audit user
   • BIndicator failure
   • CRisk assessment returns the inherent and residual risk impact as ‘Very High’
   • DAttestation returns the result as ‘Not Implemented’
   • EControl effectiveness is ‘Ineffective’ and the state of control test is ‘Closed Complete’

   Show answer

   Answer: C

   Next question

9. Question 29 · 223 in bank

   In which state can reviewers either send the Policy back to draft or forward it by requesting approval?

   • ARetired
   • BPublished
   • CAwaiting Approval
   • DReview

   Show answer

   Answer: D

   Next question

10. Question 30 · 223 in bank

    GRC Options in Interactive Filters are only available through which feature?

    • AGRC Filtering
    • BMetrics Reporting
    • CPerformance Analytics
    • DTrending Analytics

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIS-RC practice, question 21. 223 questions available.