CIS-RC Mock Paper 1 2879 Created on July 15, 2022 By ServiceNow Gyan CIS-RC Mock Paper 1 This Quiz contains Multiple Choice Questions related to Risk and Compliance Application that will help you to pass Certified Implementation Specialist – Risk and Compliance (CIS-RC) certification.Instructions:Number of Questions: 45Time Limit: 1 Hour 30 MinutesPassing Marks: 70% 1 / 45 What would you leverage in order to provide users with an alternate user experience to view policies, create policy exceptions, and search for controls? Catalog Portal Help Desk Portal Access Portal Service Portal 2 / 45 UCF has a collection of what? Select all UCF terms. (Choose three) Citations Control Indicators Authority Documents Controls Policies 3 / 45 The ‘Add to Update Set’ utility is available for download via: ServiceNow HI support ServiceNow Developer site ServiceNow store ServiceNow Community 4 / 45 Where does a policy get published to when it is approved? Policy Library ServiceNow Library Knowledge Base Authoritative Records 5 / 45 _______ can be used to build the relationship between the entity classes. GRC Dependency Mapping GRC Workbench GRC Mapping GRC Relationship Mapping 6 / 45 What are the available Source types for Policy Exception? (Select three) Policy Control Objective Issue Indicators 7 / 45 Which role is not part of ServiceNow GRC? Risk Manager Risk Developer Risk User Risk Reader 8 / 45 When calculating compliance scores, what is true about the weighting of Controls? (Choose two) The weight cannot be changed The weight of the Control is set when the Control is created The default value is 10 Controls are not weighted equally by default 9 / 45 Which of the following extends from Document [sn_grc_document]? (Choose three) Policy Risk Response Task Risk Statement Authority document Risk Framework 10 / 45 Why would you create Entity classes? To show relationships between Entities and Policies and map them directory to Citations To show relationships between tables or objects you are tracking that doesn’t otherwise exist anywhere in ServiceNow To be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class To be assigned to risk statements, which generate risks for every Entity listed in the Entity Class 11 / 45 What happens when you assign an Entity Type to a Risk Statement? A risk is automatically generated for every Entity listed in the Entity Type A risk assessment is created automatically for every Entity listed in the Entity Type The Entity is now going to present a risk score and controls are going to be tied to it An assessment will be automatically generated to test each Entity listed in the Entity Type 12 / 45 Control indicators may be triggered or scheduled in which state? Review Attest Draft Retired Monitor 13 / 45 The Tablename.config: Displays the table in list view within the Content Frame Displays the configuration list view of the table in the browser tab Displays the table in list view within a separate browser tab Displays the configuration list view of the table in the Content Frame 14 / 45 In which state can Compliance Manager or above review Control and move it to either Monitor or return to Draft state? Review Attest Awaiting Approval New 15 / 45 Which role reviews the risk response and moves the Risk record into the Monitor state at the appropriate time? Risk Owner Risk User Risk Manager Risk Reader 16 / 45 Which of the following extends from item [sn_grc_item]? (Choose two) Policy Citation Control Issue Risk 17 / 45 Which one of the following is not a trigger for issue creation? Indicator failure Risk assessment returns the inherent and residual risk impact as ‘Very High’ Control effectiveness is ‘Ineffective’ and the state of control test is ‘Closed Complete’ Attestation returns the result as ‘Not Implemented’ Manual issue created by any manager or admin role as well as by audit user 18 / 45 What are the Risk Scoring methods available in ServiceNow? (Choose two) Calculated Quantitative Qualitative Residual Inherent 19 / 45 What GRC module would you access in order to update Entity Types? Risk - Entities CMDB Scoping - Profiles Scoping - Entity Types 20 / 45 In Risk Management, which role is required to move the risk record into the Monitor State? Risk Reader Risk Developer Risk User Risk Manager 21 / 45 Who can send the Policy back to draft or forward it by requesting approval? (Select three) Owner Owning Group Reviewers Approvers 22 / 45 Entity scoping is used for what? Make sure that all of your Entities have the right visibility Scope out the different users and roles that have access to the platform Create, assign, and manage controls and risks across an enterprise Create and assign controls to the correct users 23 / 45 What are the available options by default to create Policy Exception? (Select four) Service Portal Policy Exception Module Issue Record Risk Module Control Objective Record Indicators 24 / 45 Which table store the links from Entity to Entity Types? [sn_grc_m2m_entity_entity_type] [sn_grc_risk_m2m_profile_profile_type] [sn_grc_m2m_profile_profile_type] [sn_risk_m2m_profile_profile_type] 25 / 45 What are the different states available out of the box for classic/standard Risk management? Draft, Assess, Respond, Review, Monitor, Retired Draft, Assess, Review, Monitor, Retired New, Assess, Respond, Review, Monitor, Retired New, Awaiting Approval, Respond, Review, Monitor, Retired 26 / 45 Control Failure Factor represents the impact of Control Failures on what score? Total Calculated Residual Inherent 27 / 45 Which of the following extends from Content [sn_grc_content]? (Choose three) Authority document Control objective Risk Statement Policy Citation 28 / 45 After an engagement has been approved and there are remaining open tasks or issues and observations associated with the engagement, the engagement automatically moves into which state. Fieldwork Follow Up Scope Approved 29 / 45 GRC Options in Interactive Filters are only available through which feature? Trending Analytics Metrics Reporting GRC Filtering Performance Analytics 30 / 45 Who can move a Policy into Review? (Choose two) Admin Policy Owner Policy Approver Policy Reviewer 31 / 45 Which tables can be leveraged in Entity filters for Entity type to generate Entities? Any Existing ServiceNow Tables Only Scoped Tables Only Custom Tables Only GRC Tables 32 / 45 What are the four values leveraged for the Inherent and Residual Risk Score Types? Impact, Likelihood, SLE, Score Impact, Likelihood, SLE, ARO Impact, Likelihood, SLE, ALE Impact, Probability, SLE, ARO 33 / 45 If we talk about GRC maturity level, where most of the customer would fall? Between Level 0 and Level 1 Between Level 1 and Level 2 Between Level 3 and Level 4 Between Level 2 and Level 3 34 / 45 Possible regulations when Entity scoping for Healthcare. (Choose two) HETRUST FISMA HIPAA HITRUST 35 / 45 The Plugin for GRC: Audit Management is: [sn_audit_ws] [sn_audit_management] [sn_grc_audit] [sn_audit] 36 / 45 What type of customers may you encounter regarding GRC applications? (Choose three) Organization with little to nothing in place already (implementing one or more core ServiceNow GRC applications) Organization implementing ServiceNow GRC to help ease their Customer Service organization (using other tools to manage other processes) Organization recently acquired and had some bad audit findings (using ServiceNow GRC to help restart their process) Organization undergoing a full GRC transformation (implementing all three core ServiceNow GRC applications at once or in a phased approach) Organization implementing ServiceNow GRC to help ease their Help Desk organization (using other tools to manage other processes) 37 / 45 What are some characteristics of the ServiceNow Store? (Choose four) Some applications are certified by ServiceNow All applications are certified by ServiceNow Applications are certified by other developers Applications are built on the ServiceNow platform Applications may be developed by ServiceNow Technology Partners It houses both paid and free applications and integrations 38 / 45 Which of the following tables exist within the GRC: Profiles application scope? (Choose three) Policy Risk Indicator Document Content 39 / 45 Which of the following statements is true of a Risk Response task? Only one Risk Response task can be related to a Risk at a time The Risk Response task is automatically progressed through the states using a workflow The risk admin role is required to assign the Risk Response task Only users with the risk_manager role or higher can be assigned to a Risk Response task 40 / 45 What table, along with the Policy table, is linked to the Control Objective table by a many-to-many relationship? Entity Class Risk Framework Citation Authority Documents 41 / 45 The conditions under which Engagements move into the "Closed" state. (Select three) There are no open audit tasks, issues, and milestones after the engagement is approved. The engagement is closed as incomplete during the Scope, Validate, or Fieldwork states. If the engagement is Rejected, it will move to Closed state. All follow-up tasks, issues, and milestones are closed out. 42 / 45 What is the database name of the table Risk statement? sn_risk_statement sn_grc_risk_definition sn_grc_risk_statement sn_risk_definition 43 / 45 What are the different Audit Tasks available in Audit Management? (Choose four) Interviews Activities Walkthroughs Test Plan Engagement Plan Control Tests 44 / 45 To Use Advanced Risk Assessment application in Servicenow environment which property must be enable after activating GRC: Advanced Risk Plugin? Migrate to Advanced Risk Assessments [sn_risk_advanced.hide_risk_legacy_lifecycle] Migrate to Advanced Risk Assessment [sn_risk_advanced_assessment.risk_legacy_lifecycle] Migrate to Advanced Assessment [sn_risk_advanced.hide_risk_legacy_lifecycle] Migrate to Advanced Risk [sn_risk_advanced.risk_legacy_lifecycle] 45 / 45 By default, the various states of the audit engagement workflow/lifecycle are: Draft, New, Scope, Validate & Plan, Awaiting Approval, Closed New, Scope, Validate & Plan, Awaiting Approval, Follow-up, Closed Scope, Validate & Plan, Fieldwork, Awaiting Approval, Follow-up, Closed Draft, Validate & Plan, Fieldwork, Awaiting Approval, Follow-up, Closed Your score is LinkedIn Facebook Twitter VKontakte 0%
