ServiceNow Risk and Compliance CIS-RC Questions & Answers

• Question 21:

  Who can move a Policy into Review? (Choose two.)

  A. sys admin

  B. policy approver

  C. policy reviewer

  D. policy owner

  Correct Answer: AB

  Reference: https://developer.servicenow.com/app.do#!/event/knowledge18/LAB0296/ knowledge_18_LAB0296_policy_creation

• Question 22:

  The Risk thresholds in the Risk Criteria Matrix (default values) do not line up with company needs. What should you do?

  A. Configure the Risk Criteria in ServiceNow

  B. Identify Risk that will benefit from the default values

  C. Demonstrate Risk scoring scenarios using the default values

  D. Use the default values to determine new company approach

  Correct Answer: A

• Question 23:

  What are the Risk Scoring methods available in ServiceNow? (Choose two.)

  A. Quantitative

  B. Qualitative

  C. Inherent

  D. Residual

  E. Calculated

  Correct Answer: AB

  Reference: https://docs.servicenow.com/bundle/helsinki-governance-risk-compliance/page/product/grcrisk/reference/r_RiskScoring.html

• Question 24:

  Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?

  A. Audit Management

  B. Risk Management

  C. Vendor Risk Management

  D. Policy and Compliance Management

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grcpolicy-and-compliance/reference/r_PolicyComplianceMgmt.html

• Question 25:

  You are working with your customer to determine necessary audit management workflow configurations. What should they know about the approval process for audit engagements? (Choose three.)

  A. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.

  B. If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.

  C. If the engagement is rejected, it automatically moves back to the Fieldwork state.

  D. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.

  E. If the engagement is rejected, it automatically moves into the Scope state.

  Correct Answer: BCD

  Reference: https://docs.servicenow.com/bundle/kingston-governance-risk-compliance/page/product/grcaudit/task/approve-reject-engagement.html

• Question 26:

  The ServiceNow Platform requires which external components in order to ingest data from other systems?

  A. The platform includes an SDK template that allows developers to enhance it using Java

  B. A messaging bus needs to be developed

  C. The platform allows XML to be ingested, and it required developers to leverage XSLT to map it properly

  D. The platform has Integration Service that allow users and developers to ingest data from a variety of sources

  Correct Answer: D

• Question 27:

  What GRC module would you access in order to update Entity Types?

  A. Risk > Entities

  B. Scoping > Profiles

  C. Scoping > Entity Types

  D. CMDB

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grccommon/concept/c_Scoping.html

• Question 28:

  Where does a policy get published to when it is approved?

  A. Knowledge Summit

  B. ServiceNow Library

  C. Authoritative Records

  D. Knowledge Base

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/kingston-governance-risk-compliance/page/product/grcpolicy-and-compliance/reference/r_PoliciesAndProcedures.html

• Question 29:

  All of the following are PARENT tables which exist within the GRC Entities application scope EXCEPT.

  A. Item

  B. Document

  C. Content

  D. Indicator

  Correct Answer: B

• Question 30:

  Which table stored the links from Entity to Entity Types?

  A. [sn_compliance_m2m_profile_profile_type]

  B. [sn_risk_m2m_risk_profile]

  C. [sn_compliance_m2m_policy_profile]

  D. [sn_grc_m2m_profile_profile_type]

  Correct Answer: A