Is the CIS-RC practice exam free?

Yes. ExamCademy offers all 270 CIS-RC practice questions for free with a registered account. No payment needed. Optional supporter features add AI explanations and spaced repetition study tools.

How accurate are the CIS-RC practice questions?

All CIS-RC questions are community-created and reviewed by moderators to align with ServiceNow's published exam objectives. The community continuously reports and fixes issues to keep content accurate and up to date.

How should I study for the CIS-RC exam?

Start by browsing practice questions to identify weak areas. Use spaced repetition (Learn Mode) to focus study time on topics you struggle with. Combine practice questions with official ServiceNow documentation and hands-on experience for best results.

CIS-RC Practice Exam — Free 270+ Questions

270Practice Questions

3Study Modes

FreeTo Get Started

Sort:

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

Page 1 of 11 • Questions 1-25 of 270

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

Which tables extend the Content (sn_grc_content) table? (Choose two.)

A sn_compliance_citation
B sn_grc_issue
C sn_compliance_policy_statement
D sn_risk_risk

How can a user respond to consolidated (grouped) attestations? (Choose two.)

A Create subgroups for responding with same or different responses
B Provide response using a baseline template for grouped attestations
C Provide different responses for each assessment
D Provide same response for all assessments
E Provide entity class responses within the same grouping

Which feature of classic risk scoring is frequently configured by customers?

A Annualized Loss Expectancy
B Risk Criteria Matrix
C Control Failure Factor
D Indicator Failure Factor

What GRC module would you access in order to update Entity Types?

A Risk > Entities
B Scoping > Profiles
C Scoping > Entity Types
D CMDB

For classic risk assessment, indicator failure factor represents the impact of risk indicator failures on what score?

A Inherent ALE
B Calculated ALE
C Residual ALE
D Inherent SLE

For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)

A Controls are identified from library and ad-hoc
B Controls are identified from indicator results
C Controls are identified from library
D Controls are identified ad-hoc
E Controls are identified from related issues

What mapping capability in the Classic UI allows customers to relate specific Entities to each other within an Entity Class?

A Entity Class Mapper
B Entity Workbench
C GRC Workbench Dependency Map
D GRC Entity Mapper

Possible regulations when Entity scoping for Healthcare:
(Choose two.)

A HITRUST
B FISMA
C HIPAA
D HETRUST

Creating Entities in ServiceNow is easier as customers can leverage existing data used in other applications. What are some baseline tables that are commonly used to build an Entity Type? (Choose two.)

A cmn_location
B core_company
C cmn_department
D cmn_geography
E cmn_job_center

Which of the following tables are within the GRC: Policy and Compliance Management application scope? (Choose two.)

A Authority Document
B Assessment
C Policy Exception
D Audit Task

Which Script include can be modified to change how the compliance scores roll up?

A ScoreRollUp
B ComplianceUtils
C ComplianceScoreCalculator
D AssessmentStrategy

The Risk Scoring values are entered on the Risk Statement. What records inherits the values from the Risk Statement?

A Risk Criteria Matrix
B Risk Framework
C Registered Risk
D Risk Response Issue

An external audit team needs to view all of your published policies and controls? Which role can you give the team members?

A sn_audit_manager
B sn_compliance_user
C sn_audit.external_auditor
D sn_risk_user

Where does a policy get published to when it is approved?

A Knowledge Summit
B ServiceNow Library
C Authoritative Records
D Knowledge Base

In which state is the Policy once all approvals are received?

A Review
B Published
C Draft
D Retired
E Awaiting Approval

A relationship between a registered risk and a control will be automatically generated when the control objective and risk statement have the same what?

A Control
B Owner
C Entity Type
D Risk

What types of tasks are specific to the Audit module? (Choose three.)

A Control Attestation
B Interview
C Walkthrough
D Control Test
E Tabletop Exercise
F Remediation

In which state can reviewers either send the Policy back to draft or forward it by requesting approval?

A Retired
B Published
C Awaiting Approval
D Review

Which of the following are a part of the GRC: Advanced Risk scope? (Choose two.)

A Risk Hierarchy
B Risk Assessment Methodologies
C Risk Criteria Matrix
D Risk Framework

Which of the following is not used to source control data for a customer’s control framework?

A ServiceNow Product documentation
B Customer’s existing controls
C An external regulatory content provider
D ServiceNow content packs and accelerators

In addition to continuous monitoring with indicators, customers can continuously monitor controls using the application, Configuration Compliance. For entities and controls to be created after associating a control objective and configuration test what needs to happen? (Choose two.)

A You must set the property sn_compliance.cal_score_by_weighted_control to true
B You must set the property sn_compliance.auto_create_profile_and_Control to true
C You must confirm the “Create Controls Automatically” checkbox is checked on the Control Objective record
D You must update the PA Relationships related link

Entity Types use Entity Filters to generate entitles based on which of the following?

A Only GRC scoped tables in ServiceNow
B Only core tables in ServiceNow
C Tables in third party applications
D Any table in ServiceNow

Which table stores the links from Control Objective to Citation?

A [sn_compliance_m2m_statement_cftation]
B [sn_compliance_m2m_policy_statement]
C [sn_compliance_m2m_statement_policy]
D [sn_compliance_m2m_policy_profile_type]

The Single Loss Expectancy is $1.000.000 and the Annual Rate of Occurrence is 20%. What is the Annualized Loss Expectancy?

A $1,000,000
B $200,000
C $2,000,000
D $10,000

What are key prerequisites for a control test task to be generated?

A Engagement is Scope
B Risks have associated assessments
C Entity being scoped has associated controls with test plans
D Controls have a set frequency
E Entity being scoped has associated risks

CIS-RCPreview

About the CIS-RC Exam

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25

CIS-RCPreview

About the CIS-RC Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

Question 25