CIS-RC Online Practice Questions and Answers

Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)

A. Document

B. Policy

C. Risk

D. Content

E. Indicator

Which of the following statements is true of a Risk Response task?

A. Only one Risk Response task can be related to a Risk at a time

B. Only users with the risk_manager role or higher can be assigned to a Risk Response task

C. The risk admin role is required to assign the Risk Response task

D. The Risk Response task is automatically progressed through the states using a worflow

Jim is an Audit Manager. In addition to Audit Manager, which roles should be assigned to ensure he can manage the audit process as well as other GRC functions related to audit? (Choose two.)

A. sn_grc.manager

B. sn_audit.user

C. sn_grc.user

D. sn_grc.reader

E. sn_grc.developer

What table extends from Document Table?

A. Risk

B. Risk Framework

C. Risk Response Task

D. Risk Statement

All of the following are PARENT tables which exist within the GRC Entities application scope EXCEPT.

A. Item

B. Document

C. Content

D. Indicator

What are the Risk Scoring methods available in ServiceNow? (Choose two.)

A. Quantitative

B. Qualitative

C. Inherent

D. Residual

E. Calculated

Which one of the following is not a trigger for issue creation?

A. Manual issue created by any manager or admin role as well as by audit user

B. Indicator failure

C. Risk assessment returns the inherent and residual risk impact as `Very High'

D. Attestation returns the result as `Not Implemented'

E. Control effectiveness is `Ineffective' and the state of control test is `Closed Complete'

For Control records, who can modify the Control in the Draft state?

A. All compliance users

B. Only the Compliance Manager

C. Only the person assigned the Attestation

D. Only Control Owners

Entity scoping is used for what?

A. Make sure that all of your Entities have the right visibility

B. Create and assign controls to the correct users

C. Create, assign, and manage controls and risks across an enterprise

D. Scope out the different users and roles that have access to the platform

UCF has a collection of what? Select all UCF terms. (Choose three.)

A. Control Indicators

B. Authority Documents

C. Policies

D. Citations

E. Controls