Entity scoping is used for what?

Create and assign controls to the correct users

Make sure that all of your Entities have the right visibility

Create and assign controls to the correct users

Create, assign, and manage controls and risks across an enterprise

Scope out the different users and roles that have access to the platform

As a customer reaches greater GRC maturity, what can we expect to see occurring across their organization? (Choose three.)

Single Risk and Control frameworks across enterprise available to all stakeholders

Continuous real-time monitoring of control performance

Reactive strategies for GRC activities

Single Risk and Control frameworks across enterprise available to all stakeholders

Reliance on spreadsheet management for risk reporting

Continuous real-time monitoring of control performance

Cross-functional process automation

Reactive strategies for GRC activities

Which scheduled jobs in the GRC: Profiles scope help manage the population of Entity records?(Choose two.)

GRC Entity and Risk Statement Data Collection

For classic risk assessment, while a Risk is in the Assess state, reviewers can do which of the following? (Choose two.)

Answer the assessment, moving the Risk to Respond

What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?

All assessment instance records are deleted

All assessment instance records are in the Monitor state

All assessment instance records are closed

All assessment instance records are deleted

States of the assessment instance records are irrelevant

All assessment instance records are canceled

Policies can be automatically published after which of the following occurs?

Related control objectives are marked active

Policy is approved by all approvers

Policy is approved by one approver

To allow other applications to request a policy exception, you must complete the integration registry form. In addition to providing the name of the registry entry, what additional information is needed to complete the form?

You must indicate the intended Service Portal

You must indicate the audience for requesting policy exceptions

You must indicate the intended Service Portal

You must indicate the policy exception target table

You must indicate the allowed policy acknowledgement campaigns

The overall goal of Entity Classes is to:

To provide specific information about an Entity, such as who owns the Entity

To enable reporting and to support advanced risk assessment

Show relationships between Entities and policies and map them directly to Citations

Associate Control Objectives and Risk Statements with Risks and Controls

To provide specific information about an Entity, such as who owns the Entity

Which table stores the links from Policy to Control Objective?

[sn_compliance_m2m_policy_profile]

[sn_compliance_m2m_policy_profile_type]

[sn_compliance_m2m_policy_profile]

[sn_compliance_m2m_policy_statement]

[sn_compliance_m2m_statement_profile_type]

What is a risk register?

Repository for all identified risks

Repository for all unidentified risks

Repository for all identified risks

Which GRC application would you use to determine where the organization is the most vulnerable or has the most exposure?

Policy and Compliance Management

Common controls from UCF import into which table in ServiceNow?

sn_complilance_authority_document

For classic risk assessment, what are the risk components that apply to the Qualitative method?(Choose two.)

Annualized Rate of Occurrence (ARO)

What new related list was added to the risk statement and entity records after migrating to advanced risk assessment?

Assessment instances related list

Which table stores the links from the Entity Type to Risk Statement?

[sn_risk_m2m_statement_profile_type]

[sn_risk_m2m_risk_definition_profile_type]

[sn_risk_m2m_statement_profile_type]

[sn_risk_m2m_framework_profile_type]

[sn_risk_m2m_risk_definition_profile_type]

[sn_risk_m2m_policy_profile_type]

If you create a control manually and later decide to create them automatically, what will be the result?

ServiceNow identifies the control and does not create a duplicate

ServiceNow will delete the manually created control

ServiceNow creates a duplicate control and notifies the control owner

ServiceNow creates a duplicate control without notifying the control owner

ServiceNow identifies the control and does not create a duplicate

Which of the following relationship sets are considered a many-to-many relationship? (Choose three.)

Indicator Template and Entity Type

Control Objective and Entity Type

ServiceNow CIS-RC Practice Test 2 - Free Online Exam Prep & Questions

Control indicators may be triggered or scheduled in which state?

A.

Retired

B.

Monitor

C.

Review

D.

Attest

E.

Draft

ServiceNow CIS-RC Practice Test 2

Question

ServiceNow CIS-RC Practice Tests

Practice Tests