Free Certified Implementation Specialist – Risk and Compliance Exam CIS-RCI Exam Practice Test

What table, along with the Policy table, is linked to the Control Objective table by a many-to-manyrelationship?

• Entity Class
• Citation
• Authority Documents
• Risk Framework

What ensures that every time you create an Entity from a specific table, the Class of the Entity is set according to the rule?

• Entity class rules
• Entity business rules
• Entity class assignment
• Entity type rules

Entity Types are applied to which types of records? (Choose three.)

• Risk Statement
• Issue
• Risk
• Control Objective
• Policy
• Control

The Risk Scoring values are entered on the Risk Statement. What records inherits the values from the RiskStatement?

• Risk Criteria Matrix
• Risk Framework
• Registered Risk
• Risk Response Issue

What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?

• All assessment instance records are in the Monitor state
• All assessment instance records are closed
• All assessment instance records are deleted
• States of the assessment instance records are irrelevant
• All assessment instance records are canceled

Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)

• sn_grc_profile_type
• sn_grc_indicator
• sn_grc_compliance_policy_statement
• sn_grc_risk_definition
• sn_grc_profile_class

What three records need to be set-up when integrating with a provider RSS feed? (Choose three.)

• Feed sources record
• Provider record
• Regulatory Feed record
• Connection and Credentials record
• Regulatory Change Task record

What happens when you assign an Entity Type to a Risk Statement?

• An assessment will be automatically generated to test each Entity listed in the Entity Type
• A risk assessment is created automatically for every Entity listed in the Entity Type
• A risk is automatically generated for every Entity listed in the Entity Type
• The Entity is now going to present a risk score and controls are going to be tied to it

Which of the following are the classic risk score types that ServiceNow tracks? (Choose three.)

• Residual
• Inherent
• Calculated
• Operational
• Digital

What are the Risk Scoring methods available in ServiceNow? (Choose two.)

• Quantitative
• Qualitative
• Inherent
• Residual
• Calculated