Black Friday Special Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: mxmas70

Home > ServiceNow > Risk and Compliance > CIS-RCI

CIS-RCI Certified Implementation Specialist - Risk and Compliance Question and Answers

Question # 4

UCF has a collection of what? Select all UCF terms.

(Choose three.)

A.

Control Indicators

B.

Authority Documents

C.

Policies

D.

Citations

E.

Controls

Full Access
Question # 5

Which of the following are triggers for automatic creation of an issue? (Choose two.)

A.

Attestation result is Not Implemented

B.

Indicator result is Failed or Not Passed

C.

Policy Exception Not approved

D.

Control tests have been assigned but not tested

Full Access
Question # 6

When reviewing the Control Objective Table form with your customer, what are the most common choice lists to be configured? (Choose three.)

A.

Reference

B.

Classification

C.

Category

D.

Type

E.

Description

Full Access
Question # 7

Which of the following is the correct statement about Risk Scoring formulas?

A.

SLE × ARO = ALE

B.

ALE × ARO = Compliance Score

C.

ALE × ARO = SLE

D.

Impact × Urgency = ALE

Full Access
Question # 8

Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)

A.

Document

B.

Policy

C.

Risk

D.

Content

E.

Indicator

Full Access
Question # 9

Where does one go to configure the Regulatory Change Management impact assessment template?

A.

Risk Assessment Methodologies module

B.

Impact Assessment Flow in Flow Designer

C.

Impact Assessment Templates module

D.

Risk Assessment Templates module

Full Access
Question # 10

In which state is the Policy once all approvals are received?

A.

Review

B.

Published

C.

Draft

D.

Retired

E.

Awaiting Approval

Full Access
Question # 11

Which of the following are the classic risk score types that ServiceNow tracks? (Choose three.)

A.

Residual

B.

Inherent

C.

Calculated

D.

Operational

E.

Digital

Full Access
Question # 12

An external audit team needs to view all of your published policies and controls? Which role can you give the team members?

A.

sn_audit_manager

B.

sn_compliance_user

C.

sn_audit.external_auditor

D.

sn_risk_user

Full Access
Question # 13

Which table extends from the Content Table?

A.

Risk Record

B.

Risk Framework

C.

Risk Response Task

D.

Risk Statement

Full Access
Question # 14

The Citation table is a child table of which parent?

A.

Content

B.

Authority Document

C.

Item

D.

Document

Full Access
Question # 15

Control Failure Factor represents the impact of Control Failures on what score?

A.

Inherent

B.

Residual

C.

Total

D.

Calculated

Full Access
Question # 16

Control indicators may be triggered or scheduled in which state?

A.

Retired

B.

Monitor

C.

Review

D.

Attest

E.

Draft

Full Access
Question # 17

What new related list was added to the risk statement and entity records after migrating to advanced risk assessment?

A.

Aggregated risk related list

B.

Risk assessments related list

C.

Risk tolerance related list

D.

Assessment instances related list

Full Access
Question # 18

Which tables extend from the Task table? (Choose two.)

A.

Risk Framework

B.

Risk Response Task

C.

Risk Statement

D.

Risk Event

E.

Risk

Full Access