CIS-RC practice questions 41–50

1. Question 41 · 223 in bank

   Which role reviews the risk response and moves the Risk record into the Monitor state at the appropriate time?

   • ARisk Manager
   • BRisk User
   • CRisk Reader
   • DRisk Owner

   Show answer

   Answer: A

   Next question

2. Question 42 · 223 in bank

   Entity scoping is used for what?

   • AMake sure that all of your Entities have the right visibility
   • BCreate and assign controls to the correct users
   • CCreate, assign, and manage controls and risks across an enterprise
   • DScope out the different users and roles that have access to the platform

   Show answer

   Answer: C

   Next question

3. Question 43 · 223 in bank

   Control indicators may be triggered or scheduled in which state?

   • ARetired
   • BMonitor
   • CReview
   • DAttest
   • EDraft

   Show answer

   Answer: B

   Next question

4. Question 44 · 223 in bank

   The SOX content pack includes a series of policies, control, risks. How are all of these components linked together?

   • AMapping File
   • BManually
   • CAutomatically
   • DBatch import

   Show answer

   Answer: C

   Next question

5. Question 45 · 223 in bank

   Select 3

   UCF has a collection of what? Select all UCF terms. (Choose three.)

   • AControl Indicators
   • BAuthority Documents
   • CPolicies
   • DCitations
   • EControls

   Show answer

   Answer: BDE

   Next question

6. Question 46 · 223 in bank

   Select 2

   As a customer reaches greater GRC maturity, what can we expect to see occurring across their organization? (Choose three.)

   • ASingle Risk and Control frameworks across enterprise available to all stakeholders
   • BReliance on spreadsheet management for risk reporting
   • CContinuous real-time monitoring of control performance
   • DCross-functional process automation
   • EReactive strategies for GRC activities

   Show answer

   Answer: AC

   Next question

7. Question 47 · 223 in bank

   Select 2

   Which scheduled jobs in the GRC: Profiles scope help manage the population of Entity records? (Choose two.)

   • AGRC indicator nightly run
   • BGRC Entity and Risk Statement Data Collection
   • CGRC Profile Generation
   • DGRC Refresh Risk Scores

   Show answer

   Answer: AC

   Next question

8. Question 48 · 223 in bank

   Which of the following is the correct statement about Risk Scoring formulas?

   • ASLE × ARO = ALE
   • BALE × ARO = Compliance Score
   • CALE × ARO = SLE
   • DImpact × Urgency = ALE

   Show answer

   Answer: A

   Next question

9. Question 49 · 223 in bank

   Select 2

   For classic risk assessment, while a Risk is in the Assess state, reviewers can do which of the following? (Choose two.)

   • AAnswer the assessment, moving the Risk to Respond
   • BSet the Risk to Monitor
   • CDelete the Risk
   • DSet the Risk back to Draft

   Show answer

   Answer: AD

   Next question

10. Question 50 · 223 in bank

    What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?

    • AAll assessment instance records are in the Monitor state
    • BAll assessment instance records are closed
    • CAll assessment instance records are deleted
    • DStates of the assessment instance records are irrelevant
    • EAll assessment instance records are canceled

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIS-RC practice, question 41. 223 questions available.