CIS-RC Mock Paper 1

Created on By ServiceNow Gyan
ServiceNow Gyan

CIS-RC Mock Paper 1

This Quiz contains Multiple Choice Questions related to Risk and Compliance Application that will help you to pass Certified Implementation Specialist – Risk and Compliance (CIS-RC) certification.


Number of Questions: 45

Time Limit: 1 Hour 30 Minutes

Passing Marks: 70%

1 / 45

What happens when you assign an Entity Type to a Risk Statement?

2 / 45

Who can send the Policy back to draft or forward it by requesting approval? (Select three)

3 / 45

GRC Options in Interactive Filters are only available through which feature?

4 / 45

Who can move a Policy into Review? (Choose two)

5 / 45

What GRC module would you access in order to update Entity Types?

6 / 45

Control Failure Factor represents the impact of Control Failures on what score?

7 / 45

What are the different Audit Tasks available in Audit Management? (Choose four)

8 / 45

What are the Risk Scoring methods available in ServiceNow? (Choose two)

9 / 45

Which of the following extends from Document [sn_grc_document]? (Choose three)

10 / 45

To Use Advanced Risk Assessment application in Servicenow environment which property must be enable after activating GRC: Advanced Risk Plugin?

11 / 45

What are the different states available out of the box for classic/standard Risk management?

12 / 45

Which tables can be leveraged in Entity filters for Entity type to generate Entities?

13 / 45

If we talk about GRC maturity level, where most of the customer would fall?

14 / 45

Possible regulations when Entity scoping for Healthcare. (Choose two)

15 / 45

Which one of the following is not a trigger for issue creation?

16 / 45

Which of the following extends from item [sn_grc_item]? (Choose two)

17 / 45

What are the four values leveraged for the Inherent and Residual Risk Score Types?

18 / 45

The Plugin for GRC: Audit Management is:

19 / 45

_______ can be used to build the relationship between the entity classes.

20 / 45

Which of the following statements is true of a Risk Response task?

21 / 45

When calculating compliance scores, what is true about the weighting of Controls? (Choose two)

22 / 45

What table, along with the Policy table, is linked to the Control Objective table by a many-to-many relationship?

23 / 45

Which of the following extends from Content [sn_grc_content]? (Choose three)

24 / 45

What are the available options by default to create Policy Exception? (Select four)

25 / 45

Entity scoping is used for what?

26 / 45

The conditions under which Engagements move into the "Closed" state. (Select three)

27 / 45

Which role is not part of ServiceNow GRC?

28 / 45

UCF has a collection of what? Select all UCF terms. (Choose three)

29 / 45

What type of customers may you encounter regarding GRC applications? (Choose three)

30 / 45

By default, the various states of the audit engagement workflow/lifecycle are:

31 / 45

In which state can Compliance Manager or above review Control and move it to either Monitor or return to Draft state?

32 / 45

What are the available Source types for Policy Exception? (Select three)

33 / 45

Where does a policy get published to when it is approved?

34 / 45

Which of the following tables exist within the GRC: Profiles application scope? (Choose three)

35 / 45

Why would you create Entity classes?

36 / 45

What is the database name of the table Risk statement?

37 / 45

What would you leverage in order to provide users with an alternate user experience to view policies, create policy exceptions, and search for controls?

38 / 45

Which role reviews the risk response and moves the Risk record into the Monitor state at the appropriate time?

39 / 45

The ‘Add to Update Set’ utility is available for download via:

40 / 45

Control indicators may be triggered or scheduled in which state?

41 / 45

What are some characteristics of the ServiceNow Store? (Choose four)

42 / 45

After an engagement has been approved and there are remaining open tasks or issues and observations associated with the engagement, the engagement automatically moves into which state.

43 / 45

In Risk Management, which role is required to move the risk record into the Monitor State?

44 / 45

Which table store the links from Entity to Entity Types?

45 / 45

The Tablename.config: