ServiceNow Certification CIS-RCI Exam Dumps Questions

dumps2023-01-18T01:51:37+08:00

ServiceNow Certification CIS-RCI exam dumps questions are the latest version in the market. There are 45 questions in the real ServiceNow CIS-RCI test, and you have 90 minutes to write all the questions. CIS-RCI exam questions can help you prepare for the test. However, it is important to note that the questions on the actual test may be different and may test different concepts. Free ServiceNow Certification CIS-RCI exam dumps questions are below.

Page 1 of 4

1. What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?

All assessment instance records are in the Monitor state

All assessment instance records are closed

All assessment instance records are deleted

States of the assessment instance records are irrelevant

All assessment instance records are canceled

2. What baseline criteria determine when notifications are triggered in relation to audit tasks? (Choose two.)

Expiration

At 50% completion

Reassignment

Due date change

3. Which table stored the links from Entity to Entity Types?

[sn_compliance_m2m_profile_profile_type]

[sn_risk_m2m_risk_profile]

[sn_compliance_m2m_policy_profile]

[sn_grc_m2m_profile_profile_type]

4. Service Level Agreements can be used for the which of the following? (Choose two.)

Risk Issues

Risk

Risk Statement

Risk Response Task

Risk Framework

5. All of the following are PARENT tables which exist within the GRC Entities application scope EXCEPT.

Item

Document

Content

Indicator

6. What ensures that every time you create an Entity from a specific table, the Class of the Entity is set according to the rule?

Entity class rules

Entity business rules

Entity class assignment

Entity type rules

7. Entity Types are applied to which types of records? (Choose three.)

Risk Statement

Issue

Risk

Control Objective

Policy

Control

8. Which tables extend from the Task table? (Choose two.)

Risk Framework

Risk Response Task

Risk Statement

Risk Event

Risk

9. The Tablename.config:

Displays the configuration list view of the table in the browser tab

Displays the table in list view within the Content Frame

Displays the table in list view within a separate browser tab

Displays the configuration list view of the table in the Content Frame

10. The advanced planning capability enables integration of Advanced Audit with PPM.

If the advanced planning capability is selected when the audit plan is created, what extra related lists display on the engagement record in addition to the related lists displayed with basic planning? (Choose three.)

Time card

Resource plan

Entities

Cost plan

Milestones

Page 2 of 4

11. Which one of the following is not a trigger for issue creation?

Manual issue created by any manager or admin role as well as by audit user

Indicator failure

Risk assessment returns the inherent and residual risk impact as ‘Very High’

Attestation returns the result as ‘Not Implemented’

Control effectiveness is ‘Ineffective’ and the state of control test is ‘Closed Complete’

12. What table extends from Document Table?

Risk

Risk Framework

Risk Response Task

Risk Statement

13. A control objective has been related to a risk statement and they've been scoped with the same entity type.

What can we expect to occur?

Risks for this risk statement will be moved back into a Review state since there are new factors impacting risk likelihood.

A control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.

The control objective will be marked as compliant since it is mitigating the related risk statement.

Risk scores will automatically decrease for the risk statement's risks since there are now mitigating controls.

14. As a customer reaches greater GRC maturity, what can we expect to see occurring across their organization? (Choose three.)

Single Risk and Control frameworks across enterprise available to all stakeholders

Reliance on spreadsheet management for risk reporting

Continuous real-time monitoring of control performance

Cross-functional process automation

Reactive strategies for GRC activities

15. What dependency modeling feature can be used in the Classic UI to build relationships between Entity Classes?

GRC Workbench

Dependency Model Builder

Data Model Designer

GRC Tree Map

16. Which feature would you use to track completion of certain tasks?

Related Lists

SLAs

Workflow Editor

Notifications

17. To allow other applications to request a policy exception, you must complete the integration registry form. In addition to providing the name of the registry entry, what additional information is needed to complete the form?

You must indicate the audience for requesting policy exceptions

You must indicate the intended Service Portal

You must indicate the policy exception target table

You must indicate the allowed policy acknowledgement campaigns

18. Which table extends from the Content Table?

Risk Record

Risk Framework

Risk Response Task

Risk Statement

19. The SOX content pack includes a series of policies, control, risks.

How are all of these components linked together?

Mapping File

Manually

Automatically

Batch import

20. What is the minimum role required to create a risk assessment methodology (RAM)?

sn_compliance.admin

sn_risk.user

sn_risk.manager

sn_risk.admin

Page 3 of 4

21. Policies can be automatically published after which of the following occurs?

Related control objectives are marked active

Policy exception is closed

Policy is approved by all approvers

Policy is approved by one approver

22. For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls.

What are options for control identification? (Choose three.)

Controls are identified from library and ad-hoc

Controls are identified from indicator results

Controls are identified from library

Controls are identified ad-hoc

Controls are identified from related issues

23. Which table stores the links from the Entity Type to Risk Statement?

[sn_risk_m2m_statement_profile_type]

[sn_risk_m2m_framework_profile_type]

[sn_risk_m2m_risk_definition_profile_type]

[sn_risk_m2m_policy_profile_type]

24. Which of the following statements is true of a Risk Response task?

Only one Risk Response task can be related to a Risk at a time

Only users with the risk_manager role or higher can be assigned to a Risk Response task

The risk admin role is required to assign the Risk Response task

The Risk Response task is automatically progressed through the states using a worflow

25. Where does a policy get published to when it is approved?

Knowledge Summit

ServiceNow Library

Authoritative Records

Knowledge Base

26. Risk criteria typically include definitions of different levels of what? (Choose two.)

Impact

Likelihood

Criticality

Importance

Priority

27. When reviewing the Control Objective Table form with your customer, what are the most common choice lists to be configured? (Choose three.)

Reference

Classification

Category

Type

Description

28. Which of the following relationship sets are considered a many-to-many relationship? (Choose three.)

Entity Type and Entity Class

Indicator Template and Entity Type

Control and Risk

Control Objective and Entity Type

Entity Type and Entity

29. If you create a control manually and later decide to create them automatically, what will be the result?

ServiceNow will delete the manually created control

ServiceNow creates a duplicate control and notifies the control owner

ServiceNow creates a duplicate control without notifying the control owner

ServiceNow identifies the control and does not create a duplicate

30. Which GRC application would you use to determine where the organization is the most vulnerable or has the most exposure?

Vendor Risk Management

Audit Management

Policy and Compliance Management

Risk Management

Page 4 of 4

31. Common controls from UCF import into which table in ServiceNow?

sn_compliance_policy

sn_compliance_policy_statement

sn_compliance_policy_exception

sn_complilance_authority_document

32. You are working with your customer to determine necessary audit management workflow configurations.

What should they know about the approval process for audit engagements? (Choose three.)

If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.

If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.

If the engagement is rejected, it automatically moves back to the Fieldwork state.

If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.

If the engagement is rejected, it automatically moves into the Scope state.

33. How can you get the SOX content pack?

ServiceNow Store

Patch Update

Platform Upgrade

Professional Services

34. For classic risk assessment, indicator failure factor represents the impact of risk indicator failures on what score?

Inherent ALE

Calculated ALE

Residual ALE

Inherent SLE

35. What are some of the baseline tables commonly leveraged in Entity filters? (Choose three.)

Company [core_company]

Services [cmdb_ci_service]

Location [cmn_location]

Risk [sn_risk_risk]

Audit Engagement [sn_audit_engagement]

36. Controls are generated from a Control Objective when what is applied to it?

Policy

Citation

Indicator template

Entity Type

37. Who can move a Policy into Review? (Choose two.)

sys admin

policy approver

policy reviewer

policy owner

ServiceNow Certification CIS-RCI Exam Dumps Questions

ServiceNow Certification CIS-RCI Exam Dumps Questions

Share this post

Leave a Reply Cancel reply

Related Posts