ServiceNow CIS-RC Online Practice Questions and Exam Preparation

ServiceNow CIS-RC Online Questions & Answers

• Question 31:

  Control indicators may be triggered or scheduled in which state?

  A. Retired
  B. Monitor
  C. Review
  D. Attest
  E. Draft
  D. Attest

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc-risk/task/t_CreateRisk.html

• Question 32:

  Where does a policy get published to when it is approved?

  A. Knowledge Summit
  B. ServiceNow Library
  C. Authoritative Records
  D. Knowledge Base
  D. Knowledge Base

  ---

  Reference: https://docs.servicenow.com/bundle/kingston-governance-risk-compliance/page/product/grc-policy-and-compliance/reference/r_PoliciesAndProcedures.html

• Question 33:

  Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?

  A. Audit Management
  B. Risk Management
  C. Vendor Risk Management
  D. Policy and Compliance Management
  D. Policy and Compliance Management

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc-policy-and-compliance/reference/r_PolicyComplianceMgmt.html

• Question 34:

  What table, along with the Policy table, is linked to the Control Objective table by a many-to-many relationship?

  A. Entity Class
  B. Citation
  C. Authority Documents
  D. Risk Framework
  B. Citation

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc-policy-and-compliance/reference/r_InstallWPolAndCompl.html

• Question 35:

  For Control records, who can modify the Control in the Draft state?

  A. All compliance users
  B. Only the Compliance Manager
  C. Only the person assigned the Attestation
  D. Only Control Owners
  D. Only Control Owners

  ---

  Reference: https://community.servicenow.com/community?id=community_questionandsys_id=f2ee79bcdbd33b8423f4a345ca9619f7andview_source=searchResult

• Question 36:

  Which role is not part of ServiceNow GRC?

  A. Risk User
  B. Risk Developer
  C. Risk Manager
  D. Risk Reader
  B. Risk Developer

  ---

  Reference: https://community.servicenow.com/community?id=community_blogandsys_id=7d07e198db4b0cdc5ed4a851ca961994

• Question 37:

  Entity scoping is used for what?

  A. Make sure that all of your Entities have the right visibility
  B. Create and assign controls to the correct users
  C. Create, assign, and manage controls and risks across an enterprise
  D. Scope out the different users and roles that have access to the platform
  B. Create and assign controls to the correct users

  ---

  Reference: https://docs.servicenow.com/bundle/newyork-governance-risk-compliance/page/product/grc-common/task/create-a-profile.html

• Question 38:

  Which table stored the links from Entity to Entity Types?

  A. [sn_compliance_m2m_profile_profile_type]
  B. [sn_risk_m2m_risk_profile]
  C. [sn_compliance_m2m_policy_profile]
  D. [sn_grc_m2m_profile_profile_type]
  A. [sn_compliance_m2m_profile_profile_type]

• Question 39:

  Which of the following statements correctly describe the risk management lifecycle process?

  A. Access, Identify and Plan, Control, Review
  B. Control, Review, Assess, Identify and Plan
  C. Identify and Plan, Assess, Control, Review
  D. Identify and Plan, Review, Assess, Control
  A. Access, Identify and Plan, Control, Review

• Question 40:

  Which tables extend the Content (sn_grc_content) table? (Choose two.)

  A. sn_compliance_citation
  B. sn_grc_issue
  C. sn_compliance_policy_statement
  D. sn_risk_risk
  A. sn_compliance_citation
  C. sn_compliance_policy_statement

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc-policy-and-compliance/reference/r_InstallWPolAndCompl.html