ServiceNow Certified Implementation Specialist - Risk and Compliance

QUESTION NO: 1
What is a risk register?

A. Repository for all identified risks B. Repository for risk statements C. Repository for all unidentified risks D. Repository for risk criteria E. Repository for risk frameworks

Correct Answer: A

QUESTION NO: 2
On which records is the entity a required field? (Choose two.)

A. Control B. Risk C. Control objective D. Policy E. Risk statement

Correct Answer: A,B

QUESTION NO: 3
Who can move a Policy record from Review into the next state?

A. Any reviewer B. The named policy owner C. The compliance manager D. The sys admin

Correct Answer: D

QUESTION NO: 4
Which GRC processes use the entity class?
Choose 2 answers

A. Object-based risk assessments B. Advanced risk assessments C. Policy exceptions D. Classic risk assessments E. Entity Upstream/Downstream relationships

Correct Answer: A,B

QUESTION NO: 5
What tables can be leveraged in an indicator template?

A. Any table in the customer s instance B. Only tables provided in the ServiceNow baseline in a customer's instance C. Only custom tables in the customer's instance D. only GRC tables in the customer's instance

Correct Answer: A

QUESTION NO: 6
What record maintains the primary Risk Assessment Methodology that is displayed on the entity record?

A. Entity Class B. Entity Tier C. Entity Type D. Entity

Correct Answer: A

QUESTION NO: 7
What table extends from Document Table?

A. Risk Framework B. Risk C. Risk Response Task D. Risk Statement

Correct Answer: B

QUESTION NO: 8
For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)

A. Controls are identified from related issues B. Controls are identified from library C. Controls are identified from library and ad-hoc D. Controls are identified ad-hoc E. Controls are identified from indicator results

Correct Answer: B,C,D

QUESTION NO: 9
An Entity can belong to one or multiple of which of the following?

A. Entity Classes B. Entity Types C. Information Objects D. Departments

Correct Answer: C

QUESTION NO: 10
What is the minimum role required for creating a policy acknowledgement campaign?

A. sn_risk.user B. sn_compliance.user C. sn_compliance.admin D. sn_compliance.manager E. sn_control.owner

Correct Answer: C

QUESTION NO: 11
Which scheduled jobs in the GRC: Profiles scope help manage the population of Entity records? (Choose two.)

A. GRC Entity and Risk Statement Data Collection B. GRC indicator nightly run C. GRC Refresh Risk Scores D. GRC Profile Generation

Correct Answer: B,C

ServiceNow Certified Implementation Specialist - Risk and Compliance - CIS-RCI Exam Questions