ServiceNow Risk and Compliance CIS-RCI Questions & Answers

• Question 1:

  What table, along with the Policy table, is linked to the Control Objective table by a many- to-many relationship?

  A. Entity Class

  B. Citation

  C. Authority Documents

  D. Risk Framework

  Correct Answer: B

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk- compliance/page/product/grc-policyand-compliance/reference/r_InstallWPolAndCompl.html

• Question 2:

  Which of the following statements correctly describe the risk management lifecycle process?

  A. Access, Identify and Plan, Control, Review

  B. Control, Review, Assess, Identify and Plan

  C. Identify and Plan, Assess, Control, Review

  D. Identify and Plan, Review, Assess, Control

  Correct Answer: A

• Question 3:

  Why would you create Entity classes?

  A. To show relationships between tables or objects you are tracking that doesn't otherwise exist anywhere in ServiceNow

  B. To be assigned to risk statements, which generate risks for every Entity listed in the Entity Class

  C. To be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class

  D. To show relationships between Entities and Policies and map them directory to Citations

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk- compliance/page/product/grccommon/task/t_CreateProfileTypes.html

• Question 4:

  All of the following are PARENT tables which exist within the GRC Entities application scope EXCEPT.

  A. Item

  B. Document

  C. Content

  D. Indicator

  Correct Answer: B

• Question 5:

  Which of the following extends from items?

  A. Citation

  B. Controls

  C. Issue

  D. Policy

  Correct Answer: D

• Question 6:

  Where does a policy get published to when it is approved?

  A. Knowledge Summit

  B. ServiceNow Library

  C. Authoritative Records

  D. Knowledge Base

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/kingston-governance-risk- compliance/page/product/grcpolicy-and-compliance/reference/r_PoliciesAndProcedures.html

• Question 7:

  What table extends from Document Table?

  A. Risk

  B. Risk Framework

  C. Risk Response Task

  D. Risk Statement

  Correct Answer: A

• Question 8:

  Which role reviews the risk response and moves the Risk record into the Monitor state at the appropriate time?

  A. Risk Manager

  B. Risk User

  C. Risk Reader

  D. Risk Owner

  Correct Answer: A

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk- compliance/page/product/grc-risk/task/t_CreateRisk.html

• Question 9:

  In which state can reviewers either send the Policy back to draft or forward it by requesting approval?

  A. Retired

  B. Published

  C. Awaiting Approval

  D. Review

  Correct Answer: D

  Reference: https://community.servicenow.com/swp?id=community_sys_id=0b504fa1db98dbc01dcaf3231f9619a2andview_source=searchResult

• Question 10:

  What would you leverage in order to provide users with an alternate user experience to view policies, create policy exceptions, and search for controls?

  A. Help Desk Portal

  B. Catalog Portal

  C. Access Portal

  D. Service Portal

  Correct Answer: B