ServiceNow Risk and Compliance CIS-RCI Questions & Answers

• Question 31:

  The Risk thresholds in the Risk Criteria Matrix (default values) do not line up with company needs. What should you do?

  A. Configure the Risk Criteria in ServiceNow

  B. Identify Risk that will benefit from the default values

  C. Demonstrate Risk scoring scenarios using the default values

  D. Use the default values to determine new company approach

  Correct Answer: A

• Question 32:

  You are working with your customer to determine necessary audit management workflow configurations. What should they know about the approval process for audit engagements? (Choose three.)

  A. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.

  B. If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.

  C. If the engagement is rejected, it automatically moves back to the Fieldwork state.

  D. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.

  E. If the engagement is rejected, it automatically moves into the Scope state.

  Correct Answer: BCD

  Reference: https://docs.servicenow.com/bundle/kingston-governance-risk-compliance/page/product/grc-audit/task/approve-reject-engagement.html

• Question 33:

  UCF has a collection of what? Select all UCF terms. (Choose three.)

  A. Control Indicators

  B. Authority Documents

  C. Policies

  D. Citations

  E. Controls

  Correct Answer: BDE

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk- compliance/page/product/grc-ucfimport/concept/c_UCF.html

• Question 34:

  The SOX content pack includes a series of policies, control, risks. How are all of these components linked together?

  A. Mapping File

  B. Manually

  C. Automatically

  D. Batch import

  Correct Answer: C

• Question 35:

  Entity scoping is used for what?

  A. Make sure that all of your Entities have the right visibility

  B. Create and assign controls to the correct users

  C. Create, assign, and manage controls and risks across an enterprise

  D. Scope out the different users and roles that have access to the platform

  Correct Answer: B

  Reference: https://docs.servicenow.com/bundle/newyork-governance-risk- compliance/page/product/grccommon/task/create-a-profile.html

• Question 36:

  The Tablename.config:

  A. Displays the configuration list view of the table in the browser tab

  B. Displays the table in list view within the Content Frame

  C. Displays the table in list view within a separate browser tab

  D. Displays the configuration list view of the table in the Content Frame

  Correct Answer: A

  Reference: https://docs.servicenow.com/bundle/orlando-platform-user- interface/page/administer/navigationand-ui/task/t_NavigateDirectlyToATable.html

• Question 37:

  Which tables extend the Content (sn_grc_content) table? (Choose two.)

  A. sn_compliance_citation

  B. sn_grc_issue

  C. sn_compliance_policy_statement

  D. sn_risk_risk

  Correct Answer: AC

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk- compliance/page/product/grc-policyand-compliance/reference/r_InstallWPolAndCompl.html

• Question 38:

  Which role is not part of ServiceNow GRC?

  A. Risk User

  B. Risk Developer

  C. Risk Manager

  D. Risk Reader

  Correct Answer: B

  Reference: https://community.servicenow.com/community?id=community_blogandsys_id=7d07e198db4b0cdc5ed4a851ca961994

• Question 39:

  What happens when you assign an Entity Type to a Risk Statement?

  A. An assessment will be automatically generated to test each Entity listed in the Entity Type

  B. A risk assessment is created automatically for every Entity listed in the Entity Type

  C. A risk is automatically generated for every Entity listed in the Entity Type

  D. The Entity is now going to present a risk score and controls are going to be tied to it

  Correct Answer: C

  Reference: https://community.servicenow.com/community?id=community_

• Question 40:

  Which table stored the links from Entity to Entity Types?

  A. [sn_compliance_m2m_profile_profile_type]

  B. [sn_risk_m2m_risk_profile]

  C. [sn_compliance_m2m_policy_profile]

  D. [sn_grc_m2m_profile_profile_type]

  Correct Answer: A