CIS-RC practice questions 51–60

1. Question 51 · 223 in bank

   Policies can be automatically published after which of the following occurs?

   • ARelated control objectives are marked active
   • BPolicy exception is closed
   • CPolicy is approved by all approvers
   • DPolicy is approved by one approver

   Show answer

   Answer: C

   Next question

2. Question 52 · 223 in bank

   To allow other applications to request a policy exception, you must complete the integration registry form. In addition to providing the name of the registry entry, what additional information is needed to complete the form?

   • AYou must indicate the audience for requesting policy exceptions
   • BYou must indicate the intended Service Portal
   • CYou must indicate the policy exception target table
   • DYou must indicate the allowed policy acknowledgement campaigns

   Show answer

   Answer: C

   Next question

3. Question 53 · 223 in bank

   What is the minimum role required for creating a policy acknowledgement campaign?

   • Asn_risk.user
   • Bsn_compliance.user
   • Csn_compliance.admin
   • Dsn_compliance.manager
   • Esn_control.owner

   Show answer

   Answer: B

   Next question

4. Question 54 · 223 in bank

   Select 3

   Which of the following are the classic risk score types that ServiceNow tracks? (Choose three.)

   • AResidual
   • BInherent
   • CCalculated
   • DOperational
   • EDigital

   Show answer

   Answer: ABC

   Next question

5. Question 55 · 223 in bank

   The overall goal of Entity Classes is to:

   • ATo enable reporting and to support advanced risk assessment
   • BShow relationships between Entities and policies and map them directly to Citations
   • CAssociate Control Objectives and Risk Statements with Risks and Controls
   • DTo provide specific information about an Entity, such as who owns the Entity

   Show answer

   Answer: A

   Next question

6. Question 56 · 223 in bank

   What is the condition that must exist to edit the risk scoring logic of a published risk assessment methodology (RAM)?

   • AAll assessment instance records are closed
   • BAll assessment instance records are deleted or canceled
   • CAll assessment instance records are in the Monitor state
   • DAll assessment instance records are in the Draft state

   Show answer

   Answer: B

   Next question

7. Question 57 · 223 in bank

   What is the minimum role required to create a risk assessment methodology (RAM)?

   • Asn_compliance.admin
   • Bsn_risk.user
   • Csn_risk.manager
   • Dsn_risk.admin

   Show answer

   Answer: D

   Next question

8. Question 58 · 223 in bank

   Select 2

   Which of the following extends from Document Table? (Choose two.)

   • ACitation
   • BPolicy
   • CControl Objective
   • DAuthority Document

   Show answer

   Answer: BD

   Next question

9. Question 59 · 223 in bank

   Which table stores the links from Policy to Control Objective?

   • A[sn_compliance_m2m_policy_profile_type]
   • B[sn_compliance_m2m_policy_profile]
   • C[sn_compliance_m2m_policy_statement]
   • D[sn_compliance_m2m_statement_profile_type]

   Show answer

   Answer: C

   Next question

10. Question 60 · 223 in bank

    What is a risk register?

    • ARepository for all unidentified risks
    • BRepository for risk frameworks
    • CRepository for risk statements
    • DRepository for all identified risks
    • ERepository for risk criteria

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIS-RC practice, question 51. 223 questions available.