CIS-RC Practice Exam — 281 Free ServiceNow Questions

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

281Practice Questions

3Study Modes

Free

TopicSort

Question 1

Extended Capabilities

Which tables extend the Content (sn_grc_content) table? (Choose two.)

A sn_compliance_citation
B sn_grc_issue
C sn_compliance_policy_statement
D sn_risk_risk

Question 2

Audit Management Implementation

Question 3

Risk Implementation Approach

Question 4

Entity Scoping

Question 5

Risk Implementation Approach

Question 6

Risk Implementation Approach

Question 7

Extended Capabilities

Question 8

Entity Scoping

Question 9

Entity Scoping

Question 10

Policy and Compliance Implementation Approach

Question 11

Policy and Compliance Implementation Approach

Question 12

Risk Implementation Approach

Question 13

Audit Management Implementation

Question 14

Policy and Compliance Implementation Approach

Question 15

Policy and Compliance Implementation Approach

Question 16

Risk Implementation Approach

Question 17

Audit Management Implementation

Question 18

Policy and Compliance Implementation Approach

Question 19

Risk Implementation Approach

Question 20

Entity Scoping

Question 21

Entity Scoping

Question 22

Entity Scoping

Question 23

Audit Management Implementation

Question 24

Risk Implementation Approach

Question 25

Audit Management Implementation

Page 1 of 12 • Questions 1-25 of 281

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

How can a user respond to consolidated (grouped) attestations? (Choose two.)

A Create subgroups for responding with same or different responses
B Provide response using a baseline template for grouped attestations
C Provide different responses for each assessment
D Provide same response for all assessments
E Provide entity class responses within the same grouping

Which feature of classic risk scoring is frequently configured by customers?

A Annualized Loss Expectancy
B Risk Criteria Matrix
C Control Failure Factor
D Indicator Failure Factor

What GRC module would you access in order to update Entity Types?

A Risk > Entities
B Scoping > Profiles
C Scoping > Entity Types
D CMDB

For classic risk assessment, indicator failure factor represents the impact of risk indicator failures on what score?

A Inherent ALE
B Calculated ALE
C Residual ALE
D Inherent SLE

Question 6

Risk Implementation Approach

Question 7

Extended Capabilities

Question 8

Entity Scoping

Question 9

Entity Scoping

Question 10

Policy and Compliance Implementation Approach

Question 11

Policy and Compliance Implementation Approach

Question 12

Risk Implementation Approach

Question 13

Audit Management Implementation

Question 14

Policy and Compliance Implementation Approach

Question 15

Policy and Compliance Implementation Approach

Question 16

Risk Implementation Approach

Question 17

Audit Management Implementation

Question 18

Policy and Compliance Implementation Approach

Question 19

Risk Implementation Approach

Question 20

Entity Scoping

Question 21

Entity Scoping

Question 22

Entity Scoping

Question 23

Audit Management Implementation

Question 24

Risk Implementation Approach

Question 25

Audit Management Implementation

For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)

A Controls are identified from library and ad-hoc
B Controls are identified from indicator results
C Controls are identified from library
D Controls are identified ad-hoc
E Controls are identified from related issues

What mapping capability in the Classic UI allows customers to relate specific Entities to each other within an Entity Class?

A Entity Class Mapper
B Entity Workbench
C GRC Workbench Dependency Map
D GRC Entity Mapper

Possible regulations when Entity scoping for Healthcare:
(Choose two.)

A HITRUST
B FISMA
C HIPAA
D HETRUST

Creating Entities in ServiceNow is easier as customers can leverage existing data used in other applications. What are some baseline tables that are commonly used to build an Entity Type? (Choose two.)

A cmn_location
B core_company
C cmn_department
D cmn_geography
E cmn_job_center

Which of the following tables are within the GRC: Policy and Compliance Management application scope? (Choose two.)

A Authority Document
B Assessment
C Policy Exception
D Audit Task

Which Script include can be modified to change how the compliance scores roll up?

A ScoreRollUp
B ComplianceUtils
C ComplianceScoreCalculator
D AssessmentStrategy

The Risk Scoring values are entered on the Risk Statement. What records inherits the values from the Risk Statement?

A Risk Criteria Matrix
B Risk Framework
C Registered Risk
D Risk Response Issue

An external audit team needs to view all of your published policies and controls? Which role can you give the team members?

A sn_audit_manager
B sn_compliance_user
C sn_audit.external_auditor
D sn_risk_user

Where does a policy get published to when it is approved?

A Knowledge Summit
B ServiceNow Library
C Authoritative Records
D Knowledge Base

In which state is the Policy once all approvals are received?

A Review
B Published
C Draft
D Retired
E Awaiting Approval

A relationship between a registered risk and a control will be automatically generated when the control objective and risk statement have the same what?

A Control
B Owner
C Entity Type
D Risk

What types of tasks are specific to the Audit module? (Choose three.)

A Control Attestation
B Interview
C Walkthrough
D Control Test
E Tabletop Exercise
F Remediation

In which state can reviewers either send the Policy back to draft or forward it by requesting approval?

A Retired
B Published
C Awaiting Approval
D Review

Which of the following are a part of the GRC: Advanced Risk scope? (Choose two.)

A Risk Hierarchy
B Risk Assessment Methodologies
C Risk Criteria Matrix
D Risk Framework

Which of the following is not used to source control data for a customer’s control framework?

A ServiceNow Product documentation
B Customer’s existing controls
C An external regulatory content provider
D ServiceNow content packs and accelerators

In addition to continuous monitoring with indicators, customers can continuously monitor controls using the application, Configuration Compliance. For entities and controls to be created after associating a control objective and configuration test what needs to happen? (Choose two.)

A You must set the property sn_compliance.cal_score_by_weighted_control to true
B You must set the property sn_compliance.auto_create_profile_and_Control to true
C You must confirm the “Create Controls Automatically” checkbox is checked on the Control Objective record
D You must update the PA Relationships related link

Entity Types use Entity Filters to generate entitles based on which of the following?

A Only GRC scoped tables in ServiceNow
B Only core tables in ServiceNow
C Tables in third party applications
D Any table in ServiceNow

Which table stores the links from Control Objective to Citation?

A [sn_compliance_m2m_statement_cftation]
B [sn_compliance_m2m_policy_statement]
C [sn_compliance_m2m_statement_policy]
D [sn_compliance_m2m_policy_profile_type]

The Single Loss Expectancy is $1.000.000 and the Annual Rate of Occurrence is 20%. What is the Annualized Loss Expectancy?

A $1,000,000
B $200,000
C $2,000,000
D $10,000

What are key prerequisites for a control test task to be generated?

A Engagement is Scope
B Risks have associated assessments
C Entity being scoped has associated controls with test plans
D Controls have a set frequency
E Entity being scoped has associated risks

Join Us Among the Stars

CIS-RCPreview

About the CIS-RC Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25