What are some characteristics of the ServiceNow Store? (Choose four.)

Some applications are certified by ServiceNow

Applications may be developed by ServiceNow Technology Partners

It houses both paid and free applications and integrations

Applications are built om the ServiceNow platform

Some applications are certified by ServiceNow

All applications are certified by ServiceNow

Applications may be developed by ServiceNow Technology Partners

It houses both paid and free applications and integrations

Applications are built om the ServiceNow platform

Applications are certified by other developers

Which of the following statements is true of a Risk Response task?

The risk admin role is required to assign the Risk Response task

Only one Risk Response task can be related to a Risk at a time

Only users with the risk_manager role or higher can be assigned to a Risk Response task

The risk admin role is required to assign the Risk Response task

The Risk Response task is automatically progressed through the states using a worflow

Why would you create Entity classes?

To be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class

To show relationships between tables or objects you are tracking that doesn’t otherwise exist anywhere in ServiceNow

To be assigned to risk statements, which generate risks for every Entity listed in the Entity Class

To be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class

To show relationships between Entities and Policies and map them directory to Citations

The Tablename.config:

Displays the configuration list view of the table in the browser tab

Displays the table in list view within the Content Frame

Displays the table in list view within a separate browser tab

Displays the configuration list view of the table in the Content Frame

What happens when you assign an Entity Type to a Risk Statement?

A risk is automatically generated for every Entity listed in the Entity Type

An assessment will be automatically generated to test each Entity listed in the Entity Type

A risk assessment is created automatically for every Entity listed in the Entity Type

A risk is automatically generated for every Entity listed in the Entity Type

The Entity is now going to present a risk score and controls are going to be tied to it

There is a direct relationship between Entity Class and Entity Type when:

They have the same Entity Types

There is no direct relationship

They leverage the same reporting

Which table stored the links from Entity to Entity Types?

[sn_compliance_m2m_profile_profile_type]

[sn_compliance_m2m_policy_profile]

[sn_grc_m2m_profile_profile_type]

The ServiceNow Platform requires which external components in order to ingest data from other systems?

The platform has Integration Service that allow users and developers to ingest data from a variety of sources

The platform includes an SDK template that allows developers to enhance it using Java

A messaging bus needs to be developed

The platform allows XML to be ingested, and it required developers to leverage XSLT to map it properly

The platform has Integration Service that allow users and developers to ingest data from a variety of sources

You are working with your customer to determine necessary audit management workflow configurations. What should they know about the approval process for audit engagements? (Choose three.)

If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.

If the engagement is rejected, it automatically moves back to the Fieldwork state.

If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.

If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.

If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.

If the engagement is rejected, it automatically moves back to the Fieldwork state.

If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.

If the engagement is rejected, it automatically moves into the Scope state.

Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?

Policy and Compliance Management

The Risk thresholds in the Risk Criteria Matrix (default values) do not line up with company needs.What should you do?

Configure the Risk Criteria in ServiceNow

Identify Risk that will benefit from the default values

Demonstrate Risk scoring scenarios using the default values

Use the default values to determine new company approach

Which one of the following is not a trigger for issue creation?

Attestation returns the result as ‘Not Implemented’

Manual issue created by any manager or admin role as well as by audit user

Risk assessment returns the inherent and residual risk impact as ‘Very High’

Attestation returns the result as ‘Not Implemented’

Control effectiveness is ‘Ineffective’ and the state of control test is ‘Closed Complete’

Which of the following statements correctly describe the risk management lifecycle process?

Access, Identify and Plan, Control, Review

Control, Review, Assess, Identify and Plan

Identify and Plan, Assess, Control, Review

Identify and Plan, Review, Assess, Control

When calculating compliance scores, what is true about the weighting of Controls? (Choose two.)

The weight of the Control is set when the Control is created

Controls are not weighted equally by default

The weight of the Control is set when the Control is created

What type of customers may you encounter? (Choose three.)

Organization recently acquired and had some bad audit findings (using ServiceNow GRC to help restart their process)

Organization with little to nothing in place already (implementing one or more core ServiceNow GRC applications)

Organization implementing ServiceNow GRC to help ease their Customer Service organization(using other tools to manage other processes)

Organization recently acquired and had some bad audit findings (using ServiceNow GRC to help restart their process)

Organization with little to nothing in place already (implementing one or more core ServiceNow GRC applications)

Organization undergoing a full GRC transformation (implementing all three core ServiceNow GRC applications at once or in a phased approach)

Organization implementing ServiceNow GRC to help ease their Customer Service organization(using other tools to manage other processes)

Organization implementing ServiceNow GRC to help ease their Help Desk organization (using other tools to manage other processes)

For Control records, who can modify the Control in the Draft state?

Only the person assigned the Attestation

ServiceNow CIS-RC Practice Test 1 - Free Online Exam Prep & Questions

Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)

A.

Document

B.

Policy

C.

Risk

D.

Content

E.

Indicator

ServiceNow CIS-RC Practice Test 1

Question

ServiceNow CIS-RC Practice Tests

Practice Tests