CIS-RC Online Practice Questions and Answers

Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)

A. Document

B. Policy

C. Risk

D. Content

E. Indicator

Which of the following statements is true of a Risk Response task?

A. Only one Risk Response task can be related to a Risk at a time

B. Only users with the risk_manager role or higher can be assigned to a Risk Response task

C. The risk admin role is required to assign the Risk Response task

D. The Risk Response task is automatically progressed through the states using a worflow

What happens when you assign an Entity Type to a Risk Statement?

A. An assessment will be automatically generated to test each Entity listed in the Entity Type

B. A risk assessment is created automatically for every Entity listed in the Entity Type

C. A risk is automatically generated for every Entity listed in the Entity Type

D. The Entity is now going to present a risk score and controls are going to be tied to it

Which filter navigation syntax displays the table in list view within a separate browser tab?

A. Tablename_LIST

B. Tablename.list

C. Tablename.LIST

D. Tablename.List

All of the following are PARENT tables which exist within the GRC Entities application scope EXCEPT.

A. Item

B. Document

C. Content

D. Indicator

Where does a policy get published to when it is approved?

A. Knowledge Summit

B. ServiceNow Library

C. Authoritative Records

D. Knowledge Base

You are working with your customer to determine necessary audit management workflow configurations. What should they know about the approval process for audit engagements? (Choose three.)

A. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.

B. If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.

C. If the engagement is rejected, it automatically moves back to the Fieldwork state.

D. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.

E. If the engagement is rejected, it automatically moves into the Scope state.

The Risk thresholds in the Risk Criteria Matrix (default values) do not line up with company needs. What should you do?

A. Configure the Risk Criteria in ServiceNow

B. Identify Risk that will benefit from the default values

C. Demonstrate Risk scoring scenarios using the default values

D. Use the default values to determine new company approach

What are the four values leveraged for the Inherent and Residual Risk Score Types?

A. Impact, Probability, SLE, ARO

B. Impact, Likelihood, SLE, ALE

C. Impact, Likelihood, SLE, Score

D. Impact, Likelihood, SLE, ARO

Entity scoping is used for what?

A. Make sure that all of your Entities have the right visibility

B. Create and assign controls to the correct users

C. Create, assign, and manage controls and risks across an enterprise

D. Scope out the different users and roles that have access to the platform