ServiceNow Risk and Compliance CIS-RCI Questions & Answers

• Question 21:

  Who can move a Policy into Review? (Choose two.)

  A. sys admin

  B. policy approver

  C. policy reviewer

  D. policy owner

  Correct Answer: AB

  Reference: https://developer.servicenow.com/app.do#!/event/knowledge18/LAB0296/knowledge_18_LAB0296_policy_creation

• Question 22:

  For Control records, who can modify the Control in the Draft state?

  A. All compliance users

  B. Only the Compliance Manager

  C. Only the person assigned the Attestation

  D. Only Control Owners

  Correct Answer: D

  Reference: https://community.servicenow.com/community?id=community_andsys_id=f2ee79bcdbd33b8423f4a345ca9619f7andview_source=searchResult

• Question 23:

  Which of the following statements is true of a Risk Response task?

  A. Only one Risk Response task can be related to a Risk at a time

  B. Only users with the risk_manager role or higher can be assigned to a Risk Response task

  C. The risk admin role is required to assign the Risk Response task

  D. The Risk Response task is automatically progressed through the states using a worflow

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk- compliance/page/product/grc-risk/reference/r_InstallWRisk.html

• Question 24:

  What are the Risk Scoring methods available in ServiceNow? (Choose two.)

  A. Quantitative

  B. Qualitative

  C. Inherent

  D. Residual

  E. Calculated

  Correct Answer: AB

  Reference: https://docs.servicenow.com/bundle/helsinki-governance-risk- compliance/page/product/grc-risk/reference/r_RiskScoring.html

• Question 25:

  What type of customers may you encounter? (Choose three.)

  A. Organization recently acquired and had some bad audit findings (using ServiceNow GRC to help restart their process)

  B. Organization with little to nothing in place already (implementing one or more core ServiceNow GRC applications)

  C. Organization undergoing a full GRC transformation (implementing all three core ServiceNow GRC applications at once or in a phased approach)

  D. Organization implementing ServiceNow GRC to help ease their Customer Service organization (using other tools to manage other processes)

  E. Organization implementing ServiceNow GRC to help ease their Help Desk organization (using other tools to manage other processes)

  Correct Answer: ABD

• Question 26:

  Control indicators may be triggered or scheduled in which state?

  A. Retired

  B. Monitor

  C. Review

  D. Attest

  E. Draft

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk- compliance/page/product/grc-risk/task/t_CreateRisk.html

• Question 27:

  The Citation table is a child table of which parent?

  A. Content

  B. Authority Document

  C. Item

  D. Document

  Correct Answer: B

  Reference: https://community.servicenow.com/community?id=community_andsys_id=ad77b570db309bcc2e247a9e0f96192f

• Question 28:

  Possible regulations when Entity scoping for Healthcare: (Choose two.)

  A. HITRUST

  B. FISMA

  C. HIPAA

  D. HETRUST

  Correct Answer: AC

• Question 29:

  What GRC module would you access in order to update Entity Types?

  A. Risk > Entities

  B. Scoping > Profiles

  C. Scoping > Entity Types

  D. CMDB

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk- compliance/page/product/grccommon/concept/c_Scoping.html

• Question 30:

  Which filter navigation syntax displays the table in list view within a separate browser tab?

  A. Tablename_LIST

  B. Tablename.list

  C. Tablename.LIST

  D. Tablename.List

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-platform-user- interface/page/administer/navigationand-ui/task/t_NavigateDirectlyToATable.html