ServiceNow Risk and Compliance CIS-RCI Questions & Answers

• Question 11:

  What are the four values leveraged for the Inherent and Residual Risk Score Types?

  A. Impact, Probability, SLE, ARO

  B. Impact, Likelihood, SLE, ALE

  C. Impact, Likelihood, SLE, Score

  D. Impact, Likelihood, SLE, ARO

  Correct Answer: A

• Question 12:

  There is a direct relationship between Entity Class and Entity Type when:

  A. They have the same Entity Types

  B. There is no direct relationship

  C. They have the same Entities

  D. They leverage the same reporting

  Correct Answer: A

• Question 13:

  Which of the following are scoped applications related to the Risk and Compliance applications? (Choose four.)

  A. GRC: GRC Profiles

  B. GRC: Attestation Design

  C. GRC: UCF Compliance

  D. GRC: Policy and Compliance

  E. GRC: Performance Analytics

  F. GRC: Risk Management

  Correct Answer: BDEF

  Reference: https://community.servicenow.com/community?id=community_blogandsys_id=7d07e198db4b0cdc5ed4a851ca961994

• Question 14:

  Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?

  A. Audit Management

  B. Risk Management

  C. Vendor Risk Management

  D. Policy and Compliance Management

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk- compliance/page/product/grc-policyand-compliance/reference/r_PolicyComplianceMgmt.html

• Question 15:

  GRC Options in Interactive Filters are only available through which feature?

  A. GRC Filtering

  B. Metrics Reporting

  C. Performance Analytics

  D. Trending Analytics

  Correct Answer: C

• Question 16:

  Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)

  A. Document

  B. Policy

  C. Risk

  D. Content

  E. Indicator

  Correct Answer: BCE

  Reference: https://docs.servicenow.com/bundle/madrid-governance-risk- compliance/page/product/grc-policyand-compliance/concept/profiles-policy-compliance.html

• Question 17:

  The Risk Scoring values are entered on the Risk Statement. What records inherits the values from the Risk Statement?

  A. Risk Criteria Matrix

  B. Risk Framework

  C. Registered Risk

  D. Risk Response Issue

  Correct Answer: D

• Question 18:

  When calculating compliance scores, what is true about the weighting of Controls? (Choose two.)

  A. Controls are not weighted equally by default

  B. The weight cannot be changed

  C. The default value is 10

  D. The weight of the Control is set when the Control is created

  Correct Answer: CD

  Reference: https://community.servicenow.com/community?id=community_

• Question 19:

  The `Add to Update Set' utility is available for download via:

  A. ServiceNow Developer site

  B. ServiceNow store

  C. ServiceNow Community

  D. ServiceNow HI support

  Correct Answer: B

  Reference: https://community.servicenow.com/community?id=community_blogandsys_id=dd0d9079db858098d58ea345ca961925

• Question 20:

  The ServiceNow Platform requires which external components in order to ingest data from other systems?

  A. The platform includes an SDK template that allows developers to enhance it using Java

  B. A messaging bus needs to be developed

  C. The platform allows XML to be ingested, and it required developers to leverage XSLT to map it properly

  D. The platform has Integration Service that allow users and developers to ingest data from a variety of sources

  Correct Answer: D