CIS-TPRM Practice Exam — 60 Free ServiceNow Questions

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

60Practice Questions

3Study Modes

Free

TopicSort

Question 1

Assessment Configuration

What type of record is each question in an assessment?

A GRC Task[sn_grc_task]
B Assessment Metric [asmt_metric]
C Task [task]
D Assessment Instance [asmt_assessment_instance]

Question 2

Assessment Configuration

Question 3

Assessment Configuration

Question 4

Assessment Configuration

Question 5

Third-party Due Diligence

Question 6

Assessment Configuration

Question 7

Third-party Due Diligence

Question 8

Core Configuration

Question 9

Third-party Due Diligence

Question 10

Third-party Due Diligence

Question 11

Assessment Configuration

Question 12

Third-party Risk Management Fundamentals

Question 13

Assessment Configuration

Question 14

Core Configuration

Question 15

Core Configuration

Question 16

Core Configuration

Question 17

Third-party Due Diligence

Question 18

Assessment Configuration

Question 19

Assessment Configuration

Question 20

Third-party Due Diligence

Question 21

Core Configuration

Question 22

Core Configuration

Question 23

Assessment Configuration

Question 24

Third-party Risk Management Fundamentals

That's the end of the Preview

This exam has 60 community-verified practice questions. Create a free account to access all questions, comments, and explanations.

Topics covered:

Assessment ConfigurationThird-party Risk Management FundamentalsCore ConfigurationThird-party Due Diligence

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 60

1 2 3

→

Know a question that should be here? Contribute to this exam

A Third-party Risk Manager needs to run a report displaying Third-party Assessments due. On which table would this report be run?

A [sn_vdr_risk_assessment]
B [sn_vdr_risk_asmt_task]
C [sn_vdr_risk_asmt_assessment]
D [sn_vdr_risk_asmt_issue]

By default, when are reminder notifications for pending assessments sent to the third party contact? (Choose two.)

A 14 day after due date
B 30 days prior to due date
C 3 days prior to due date
D 7 days prior to due date

What actions could have an impact on the third party's Risk Assessment rating? (Choose three.)

A Answering one or more questions incorrectly
B Leaving answers blank
C Omitting documentation
D Spelling errors
E Reassigning a questionnaire to a contact

What types of requests can be made by an employee selecting the Request third-party risk due diligence option? (Choose four.)

A Duplicate an engagement
B Cancel an engagement
C Offboard an engagement with due diligence
D Reassess an existing engagement for contract renewal
E Reassess an existing engagement
F Onboard a new engagement

Question 6

Assessment Configuration

Question 7

Third-party Due Diligence

Question 8

Core Configuration

Question 9

Third-party Due Diligence

Question 10

Third-party Due Diligence

Question 11

Assessment Configuration

Question 12

Third-party Risk Management Fundamentals

Question 13

Assessment Configuration

Question 14

Core Configuration

Question 15

Core Configuration

Question 16

Core Configuration

Question 17

Third-party Due Diligence

Question 18

Assessment Configuration

Question 19

Assessment Configuration

Question 20

Third-party Due Diligence

Question 21

Core Configuration

Question 22

Core Configuration

Question 23

Assessment Configuration

Question 24

Third-party Risk Management Fundamentals

What actions must be taken before a risk intelligence report can be requested? (Choose two.)

A A risk intelligence sample report must be downloaded by the user
B The Order reports field of the provider record must be set to true
C The Sanctioned report request field of the provider record must be set to yes
D A risk intelligence request type record must be created for the provider
E The copyright agreement field on the Risk Intelligence Report request form must be set to true.

What are the functions of the Third-party Risk Assessor? (Choose three.)

A Update third-party contract deadlines
B Create issues for the third party
C Enable communications across third parties
D Access completed assessments from third parties
E Create a Primary Contact record for a third party

What create actions can be triggered from the Rule Actions tab of a Provider-Based Submission Rule? (Choose three.)

A Create assessment
B Create issue
C Create third party
D Create primary contact
E Create task
F Create recipient

When should a Third-party Risk Issue be created? (Choose three.)

A When identifying a risk to a business
B When the third party does not include documentation required as part of an assessment
C When a response to a question in the risk assessment is not satisfactory
D When there is more than one third-party contact submitting responses
E When there are items that require additional follow-up

What will be available to Supplier Lifecycle Operations (SLO) from Third-party Risk Management (TPRM) once suppliers respond to assessments if during onboarding, SLO requests due diligence on a supplier from TPRM?

A Final risk scores
B Managed documents
C News and other articles
D Contract value

What does accepting an Issue mark?

A An implication that the known control failure is unimportant
B An intention to create an exception for a known control failure or risk
C Attempted remediation failed
D Special third parties get an exception

What are the features of Third-party Risk Issues? (Choose two.)

A Generate audit tasks for the third-party risk team
B Provide third parties direct access to update and respond to Issues
C Can be generated on-demand or automatically due to an incorrect answer
D Can only be seen by the customer's risk team

Elements can be defined on an engagement. What do these elements represent?

A An external organization on which the third party relies to provide goods, services, or support
B Component criteria for the engagement applicable to the third party's delivery of goods, services, or support.
C Risk areas defined for the engagement applicable to the third party's delivery of goods, services, or support.
D The goods, services, or support that is provided by the third party

To display your company name in the portal, change which ServiceNow property?

A sn_vdr_risk_asmt.company.name
B sn_risk_asmt.company.name
C sn_vdr_risk_.company.name
D sn_vdr_risk_asmt.company

Who are able to change the password for the third-party contact? (Choose two.)

A Third-party Contract Relationship Manager
B Third-party contact via the Forgot Password link
C sys_admin
D Third-party Risk Reviewer

Which table stores the third-party records?

A Company [core_company]
B Department [cmn_department]
C User [sys_user]
D Vendor [sn_vdr_vendor]

If a Third-party Risk Issue is for internal use only, what states can be skipped? (Choose two.)

A Analyze
B Finalize with Third-party
C New
D Submitted to Third-party

What are the benefits of performing a Third-party Risk Assessment? (Choose two.)

A To have a stronger negotiating position for future contracts
B To have third parties demonstrate that they operate their business at an acceptable risk level to your organization
C To understand with whom you are working when you partner with third parties
D To put the ownership on the third party to prove that they manage risk at a level with which the third party is comfortable

What is the default value appended to the instance URL to access the scoped Third-party Portal according to the sn_vdr_risk_asmt.vendor_portal_endpoint system property?

A /tpp
B /tpvp
C /svp
D /svdp

To what do third parties have direct access?

A Update and respond to issues and tasks
B View other third party’s assessment responses
C Modify issue remediation workflow
D View other third party’s issues and tasks

To which application do you navigate to customize the Third-party Portal?

A Service Portal Home
B Service Portal
C Now Experience Framework
D Flow Designer

How are Third-party Risk questionnaires and document requests displayed on the Third-party Portal?

A As separate requests and can be assigned to different third-party contacts
B As a single assessment assigned to a single engagement contact
C As separate requests and can only be assigned to the same third-party contact
D As a single assessment assigned to a single third-party contact

The assessment page provides an area to import what kind of a completed questionnaire?

A SIG
B GDPR
C SOX
D SOC1 and SOC2

What is the advantage of using both TPRM and GRC/IRM?

A Non-compliant controls automatically adjust the risk score for a third-party entity
B Primary third-party contacts can then see their overall non-compliant risk score
C All compliance controls are automatically visible to the third-party risk manager
D Third-party Risk engagements automatically match with Audit engagements

Join Us Among the Stars

CIS-TPRMPreview

About the CIS-TPRM Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24

That's the end of the Preview

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Question 21

Question 22

Question 23

Question 24