CIS-RCI 시험 - ServiceNow실제시험문제와 답 - 45문항

Question No : 1

Possible regulations when Entity scoping for Healthcare: (Choose two.)

A.HITRUST
B.FISMA
C.HIPAA
D.HETRUST

정답:

Question No : 2

There is a direct relationship between Entity Class and Entity Type when:

A.They have the same Entity Types
B.There is no direct relationship
C.They have the same Entities
D.They leverage the same reporting

정답:

Question No : 3

The Risk Scoring values are entered on the Risk Statement .
What records inherits the values from the Risk Statement?

A.Risk Criteria Matrix
B.Risk Framework
C.Registered Risk
D.Risk Response Issue

정답:

Question No : 4

What table extends from Document Table?

A.Risk
B.Risk Framework
C.Risk Response Task
D.Risk Statement

정답:

Question No : 5

Control Failure Factor represents the impact of Control Failures on what score?

A.Inherent
B.Residual
C.Total
D.Calculated

정답:
Explanation:
Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc-risk/task/t_CreateRisk.html

Question No : 6

Which role is not part of ServiceNow GRC?

A.Risk User
B.Risk Developer
C.Risk Manager
D.Risk Reader

정답:
Explanation:
Reference: https://community.servicenow.com/community?id=community_blog&sys_id=7d07e198db4b0cdc5ed4a851ca961994

Question No : 7

Jim is an Audit Manager.
In addition to Audit Manager, which roles should be assigned to ensure he can manage the audit process as well as other GRC functions related to audit? (Choose two.)

A.sn_grc.manager
B.sn_audit.user
C.sn_grc.user
D.sn_grc.reader
E.sn_grc.developer

정답:

Question No : 8

Entity scoping is used for what?

A.Make sure that all of your Entities have the right visibility
B.Create and assign controls to the correct users
C.Create, assign, and manage controls and risks across an enterprise
D.Scope out the different users and roles that have access to the platform

정답:
Explanation:
Reference: https://docs.servicenow.com/bundle/newyork-governance-risk-compliance/page/product/grccommon/task/create-a-profile.html

Question No : 9

Which one of the following is not a trigger for issue creation?

A.Manual issue created by any manager or admin role as well as by audit user
B.Indicator failure
C.Risk assessment returns the inherent and residual risk impact as ‘Very High’
D.Attestation returns the result as ‘Not Implemented’
E.Control effectiveness is ‘Ineffective’ and the state of control test is ‘Closed Complete’

정답:

Question No : 10

You are working with your customer to determine necessary audit management workflow configurations .
What should they know about the approval process for audit engagements? (Choose three.)

A.If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.
B.If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.
C.If the engagement is rejected, it automatically moves back to the Fieldwork state.
D.If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.
E.If the engagement is rejected, it automatically moves into the Scope state.

정답:
Explanation:
Reference: https://docs.servicenow.com/bundle/kingston-governance-risk-compliance/page/product/grc-audit/task/approve-reject-engagement.html

ServiceNow CIS-RCI 시험