CIS-RC practice questions 81–90

1. Question 81 · 223 in bank

   Which of the following records does not have a lifecycle?

   • AControl Objective
   • BPolicy
   • CPolicy Exception
   • DControl

   Show answer

   Answer: A

   Next question

2. Question 82 · 223 in bank

   Select 3

   Which of the following relationship sets are considered a many-to-many relationship? (Choose three.)

   • AEntity Type and Entity Class
   • BIndicator Template and Entity Type
   • CControl and Risk
   • DControl Objective and Entity Type
   • EEntity Type and Entity

   Show answer

   Answer: CDE

   Next question

3. Question 83 · 223 in bank

   How can you get the SOX content pack?

   • AServiceNow Store
   • BPatch Update
   • CPlatform Upgrade
   • DProfessional Services

   Show answer

   Answer: A

   Next question

4. Question 84 · 223 in bank

   Select 3

   Critical parts of a successful GRC implementation are understanding the customers current: (Choose three.)

   • ARegulatory requirements
   • BRisk and Compliance personas
   • CGRC processes
   • DData breaches
   • EAudit failures

   Show answer

   Answer: ACE

   Next question

5. Question 85 · 223 in bank

   Select 3

   Which of the following are ServiceNow classic risk score types? (Choose three.)

   • AApplied
   • BCalculated
   • CInherent
   • DGenerated
   • EResidual

   Show answer

   Answer: BCE

   Next question

6. Question 86 · 223 in bank

   A control objective has been related to a risk statement and they've been scoped with the same entity type. What can we expect to occur?

   • ARisks for this risk statement will be moved back into a Review state since there are new factors impacting risk likelihood.
   • BA control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.
   • CThe control objective will be marked as compliant since it is mitigating the related risk statement.
   • DRisk scores will automatically decrease for the risk statement's risks since there are now mitigating controls.

   Show answer

   Answer: B

   Next question

7. Question 87 · 223 in bank

   Select 2

   Which collection of tables extend the Item (sn_grc_item) table? (Choose two.)

   • ARisk
   • BCitation
   • CPolicy
   • DControl

   Show answer

   Answer: AD

   Next question

8. Question 88 · 223 in bank

   Santa Clara Facility and Boston Facility are examples of what?

   • AEntities
   • BEntity Object
   • CEntity Class
   • DEntity Type

   Show answer

   Answer: A

   Next question

9. Question 89 · 223 in bank

   Select 4

   Who should be directly involved in GRC implementations? (Choose four.)

   • ABoard of directors
   • BChief Executive
   • CServiceNow platform experts
   • DBusiness Analyst
   • ERisk and compliance experts
   • FCMDB process owner

   Show answer

   Answer: CDEF

   Next question

10. Question 90 · 223 in bank

    Select 2

    Which of the following are triggers for automatic creation of an issue? (Choose two.)

    • AAttestation result is Not Implemented
    • BIndicator result is Failed or Not Passed
    • CPolicy Exception Not approved
    • DControl tests have been assigned but not tested

    Show answer

    Answer: AB

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIS-RC practice, question 81. 223 questions available.