Practice Free ServiceNow CIS-RCI Exam Questions Online, CIS-RCI Free Demo

Question No : 1
Unified Compliance Framework (UCF) uses a slightly different nomenclature structure than ServiceNow.
Common controls from UCF import into which table in ServiceNow?

A.Control Objective [sn_compliance_policy_statement]
B.Authority Document [sn_compliance_authority_document]
C.Control [sn_compliance_control]
D.Citation [sn_compliance_citation]

Answer:

Question No : 2
A control objective has been related to a risk statement and they've been scoped with the same entity type.
What can we expect to occur?

A.Risks for this risk statement will be moved back into a Review state since there are new factors impacting risk likelihood.
B.A control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.
C.The control objective will be marked as compliant since it is mitigating the related risk statement.
D.Risk scores will automatically decrease for the risk statement's risks since there are now mitigating controls.

Answer:

Question No : 3
What three records need to be set-up when integrating with a provider RSS feed? (Choose three.)

A.Feed sources record
B.Provider record
C.Regulatory Feed record
D.Connection and Credentials record
E.Regulatory Change Task record

Answer:

Question No : 4
An external audit team needs to view all of your published policies and controls? Which role can you give the team members?

A.sn_audit_manager
B.sn_compliance_user
C.sn_audit.external_auditor
D.sn_risk_user

Answer:

Question No : 5
Which GRC application would you use to determine where the organization is the most vulnerable or has the most exposure?

A.Vendor Risk Management
B.Audit Management
C.Policy and Compliance Management
D.Risk Management

Answer:

Question No : 6
What are some of the drivers for customers to get the GRC suite of applications? (Choose four.)

A.They would like efficiency
B.They would like integrated reporting
C.They would like transparency
D.They would like automated customer service
E.They would like custom websites
F.They would like workflow driven processes

Answer:

Question No : 7
Where does one go to configure the Regulatory Change Management impact assessment template?

A.Risk Assessment Methodologies module
B.Impact Assessment Flow in Flow Designer
C.Impact Assessment Templates module
D.Risk Assessment Templates module

Answer:

Question No : 8
The Calculated Risk Score utilizes data from the Inherent and Residual Risk scores to determine an adjusted ALE and Score.
What other data drives the adjustments?

A.Audit Scores
B.Attestation Score
C.Configuration Test Score
D.Control and Indicator Failure Factors

Answer:

Question No : 9
Which of the following statements is true of a Risk Response task?

A.Only one Risk Response task can be related to a Risk at a time
B.Only users with the risk_manager role or higher can be assigned to a Risk Response task
C.The risk admin role is required to assign the Risk Response task
D.The Risk Response task is automatically progressed through the states using a worflow

Answer:
Explanation:
Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc-risk/reference/r_InstallWRisk.html

Question No : 10
Which of the following extends from Document Table? (Choose two.)

A.Citation
B.Policy
C.Control Objective
D.Authority Document

Answer:

Test Online Free ServiceNow CIS-RCI Exam Questions and Answers