CIS-RC practice questions 31–40

1. Question 31 · 223 in bank

   The Risk Scoring values are entered on the Risk Statement. What records inherits the values from the Risk Statement?

   • ARisk Criteria Matrix
   • BRisk Framework
   • CRegistered Risk
   • DRisk Response Issue

   Show answer

   Answer: C

   Next question

2. Question 32 · 223 in bank

   Which of the following statements correctly describe the risk management lifecycle process?

   • AAccess, Identify and Plan, Control, Review
   • BControl, Review, Assess, Identify and Plan
   • CIdentify and Plan, Assess, Control, Review
   • DIdentify and Plan, Review, Assess, Control

   Show answer

   Answer: C

   Next question

3. Question 33 · 223 in bank

   Select 2

   When calculating compliance scores, what is true about the weighting of Controls? (Choose two.)

   • AControls are not weighted equally by default
   • BThe weight cannot be changed
   • CThe default value is 10
   • DThe weight of the Control is set when the Control is created

   Show answer

   Answer: CD

   Next question

4. Question 34 · 223 in bank

   Which role(s) has the capability to create Policies? Choose two.)

   • ACompliance Manager
   • BCompliance admin
   • CCompliance User
   • DRisk Manager

   Show answer

   Answer: C

   Next question

5. Question 35 · 223 in bank

   The ‘Add to Update Set’ utility is available for download via:

   • AServiceNow Developer site
   • BServiceNow store
   • CServiceNow Community
   • DServiceNow HI support

   Show answer

   Answer: A

   Next question

6. Question 36 · 223 in bank

   What are the four values leveraged for the Inherent and Residual Risk Score Types?

   • AImpact, Probability, SLE, ARO
   • BImpact, Likelihood, SLE, ALE
   • CImpact, Likelihood, SLE, Score
   • DImpact, Likelihood, SLE, ARO

   Show answer

   Answer: D

   Next question

7. Question 37 · 223 in bank

   What would you leverage in order to provide users with an alternate user experience to view policies, create policy exceptions, and search for controls?

   • AHelp Desk Portal
   • BCatalog Portal
   • CAccess Portal
   • DService Portal

   Show answer

   Answer: D

   Next question

8. Question 38 · 223 in bank

   Select 3

   What type of customers may you encounter? (Choose three.)

   • AOrganization recently acquired and had some bad audit findings (using ServiceNow GRC to help restart their process)
   • BOrganization with little to nothing in place already (implementing one or more core ServiceNow GRC applications)
   • COrganization undergoing a full GRC transformation (implementing all three core ServiceNow GRC applications at once or in a phased approach)
   • DOrganization implementing ServiceNow GRC to help ease their Customer Service organization (using other tools to manage other processes)
   • EOrganization implementing ServiceNow GRC to help ease their Help Desk organization (using other tools to manage other processes)

   Show answer

   Answer: ABC

   Next question

9. Question 39 · 223 in bank

   Select 2

   Possible regulations when Entity scoping for Healthcare: (Choose two.)

   • AHITRUST
   • BFISMA
   • CHIPAA
   • DHETRUST

   Show answer

   Answer: AC

   Next question

10. Question 40 · 223 in bank

    For Control records, who can modify the Control in the Draft state?

    • AAll compliance users
    • BOnly the Compliance Manager
    • COnly the person assigned the Attestation
    • DOnly Control Owners

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIS-RC practice, question 31. 223 questions available.