A control objective has been related to a risk statement and they've been scoped with the same entity type. What can we expect to occur?

A control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.

Risks for this risk statement will be moved back into a Review state since there are new factors impacting risk likelihood.

A control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.

The control objective will be marked as compliant since it is mitigating the related risk statement.

Risk scores will automatically decrease for the risk statement's risks since there are now mitigating controls.

Which of the following are triggers for automatic creation of an issue? (Choose two.)

Attestation result is Not Implemented

Control tests have been assigned but not tested

Attestation result is Not Implemented

Indicator result is Failed or Not Passed

Control tests have been assigned but not tested

Unified Compliance Framework (UCF) uses a slightly different nomenclature structure than ServiceNow. Common controls from UCF import into which table in ServiceNow?

Authority Document [sn_compliance_authority_document]

Control Objective [sn_compliance_policy_statement]

Authority Document [sn_compliance_authority_document]

Control [sn_compliance_control]

Citation [sn_compliance_citation]

What three records need to be set-up when integrating with a provider RSS feed? (Choose three.)

Connection and Credentials record

What are some of the drivers for customers to get the GRC suite of applications? (Choose four.)

They would like custom websites

They would like integrated reporting

They would like automated customer service

They would like custom websites

They would like workflow driven processes

The Calculated Risk Score utilizes data from the Inherent and Residual Risk scores to determine an adjusted ALE and Score. What other data drives the adjustments?

Control and Indicator Failure Factors

What would you use in order to accommodate a customer’s unique process around policy approvals?For example, each policy needs a second layer of approval.

Create a new field and create notifications

Add a new related list to keep track of who has already approved it and who hasn’t approved yet

Add a UI Action to track who the stakeholders are

Create a new workflow in the workflow editor

Where does one go to configure the Regulatory Change Management impact assessment template?

Impact Assessment Templates module

Risk Assessment Methodologies module

Impact Assessment Flow in Flow Designer

Impact Assessment Templates module

Risk Assessment Templates module

Setting up entity classes is required when using which GRC features? (Choose two.)

Setting up an object-based risk assessment

Leveraging advanced risk assessments

Setting up an object-based risk assessment

Adding to the policy exception integration registry

Assessing the impact of a regulatory feed

Leveraging classic risk assessments

Leveraging advanced risk assessments

For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)

Controls are identified from library and ad-hoc

Controls are identified from library

Controls are identified from library and ad-hoc

Controls are identified from indicator results

Controls are identified from library

Controls are identified from related issues

How does GRC: Policy and Compliance Management track compliance to Authority Documents?

Authority Documents are mapped to control objectives and compliance is checked when controls are tested as compliant or non-compliant.

Citations are mapped to entity-scoped controls, which are tested as compliant or non-compliant.

Authority Documents are mapped to individual policies, which are either marked compliant or non-compliant.

Authority Documents are mapped to control objectives and compliance is checked when controls are tested as compliant or non-compliant.

Citations are mapped to control objectives, and compliance is checked when controls are tested as compliant or non-compliant.

What are some of the features of scoped applications for GRC? (Choose three.)

Requires an entitlement for all environments

Ability to view all components from the sys_metadata table

Ability to restrict access to available data

Requires an entitlement for all environments

All components have a namespace prefix for identification

Provides access to all global data

Ability to view all components from the sys_metadata table

Ability to restrict access to available data

Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)

sn_grc_compliance_policy_statement

What happens when you assign an Entity Type to a Control Objective?

A control is automatically generated for every Entity listed in the Entity Type

An assessment is automatically generated to test each Entity listed in the Entity Type

A policy is created automatically for every Entity listed in the Entity Type

A control is automatically generated for every Entity listed in the Entity Type

The Entity Type presents a compliance score and controls tied to it

What are some of the baseline tables commonly leveraged in Entity filters? (Choose three.)

Audit Engagement [sn_audit_engagement]

ServiceNow CIS-RC Practice Test 3 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

ServiceNow CIS-RC Practice Test 3

Question

ServiceNow CIS-RC Practice Tests

Practice Tests