CIS-RCI 시험 - ServiceNow실제시험문제와 답 - 45문항

Question No : 1

Which feature would you use to track completion of certain tasks?

A.Related Lists
B.SLAs
C.Workflow Editor
D.Notifications

정답:

Question No : 2

What is a risk register?

A.Repository for all unidentified risks
B.Repository for risk frameworks
C.Repository for risk statements
D.Repository for all identified risks
E.Repository for risk criteria

정답:

Question No : 3

Which table stores the links from Policy to Control Objective?

A.[sn_compliance_m2m_policy_profile_type]
B.[sn_compliance_m2m_policy_profile]
C.[sn_compliance_m2m_policy_statement]
D.[sn_compliance_m2m_statement_profile_type]

정답:

Question No : 4

What is the minimum role required to create a risk assessment methodology (RAM)?

A.sn_compliance.admin
B.sn_risk.user
C.sn_risk.manager
D.sn_risk.admin

정답:

Question No : 5

Which of the following extends from Document Table? (Choose two.)

A.Citation
B.Policy
C.Control Objective
D.Authority Document

정답:

Question No : 6

Which of the following are the classic risk score types that ServiceNow tracks? (Choose three.)

A.Residual
B.Inherent
C.Calculated
D.Operational
E.Digital

정답:

Question No : 7

What is the minimum role required for creating a policy acknowledgement campaign?

A.sn_risk.user
B.sn_compliance.user
C.sn_compliance.admin
D.sn_compliance.manager
E.sn_control.owner

정답:

Question No : 8

The overall goal of Entity Classes is to:

A.To enable reporting and to support advanced risk assessment
B.Show relationships between Entities and policies and map them directly to Citations
C.Associate Control Objectives and Risk Statements with Risks and Controls
D.To provide specific information about an Entity, such as who owns the Entity

정답:

Question No : 9

To allow other applications to request a policy exception, you must complete the integration registry form.
In addition to providing the name of the registry entry, what additional information is needed to complete the form?

A.You must indicate the audience for requesting policy exceptions
B.You must indicate the intended Service Portal
C.You must indicate the policy exception target table
D.You must indicate the allowed policy acknowledgement campaigns

정답:

Question No : 10

Policies can be automatically published after which of the following occurs?

A.Related control objectives are marked active
B.Policy exception is closed
C.Policy is approved by all approvers
D.Policy is approved by one approver

정답:

Question No : 11

What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?

A.All assessment instance records are in the Monitor state
B.All assessment instance records are closed
C.All assessment instance records are deleted
D.States of the assessment instance records are irrelevant
E.All assessment instance records are canceled

정답:

Question No : 12

For classic risk assessment, while a Risk is in the Assess state, reviewers can do which of the following? (Choose two.)

A.Answer the assessment, moving the Risk to Respond
B.Set the Risk to Monitor
C.Delete the Risk
D.Set the Risk back to Draft

정답:

Question No : 13

Which of the following is the correct statement about Risk Scoring formulas?

A.SLE × ARO = ALE
B.ALE × ARO = Compliance Score
C.ALE × ARO = SLE
D.Impact × Urgency = ALE

정답:

Question No : 14

Which scheduled jobs in the GRC: Profiles scope help manage the population of Entity records? (Choose two.)

A.GRC indicator nightly run
B.GRC Entity and Risk Statement Data Collection
C.GRC Profile Generation
D.GRC Refresh Risk Scores

정답:

Question No : 15

As a customer reaches greater GRC maturity, what can we expect to see occurring across their organization? (Choose three.)

A.Single Risk and Control frameworks across enterprise available to all stakeholders
B.Reliance on spreadsheet management for risk reporting
C.Continuous real-time monitoring of control performance
D.Cross-functional process automation
E.Reactive strategies for GRC activities

정답:

ServiceNow CIS-RCI 시험