Category CIS-RCI

QUESTION 56
Which of the following are Policy Lifecycle states included in the ServiceNow baseline? (Choose two.)

QUESTION 57
What are some of the baseline tables commonly leveraged in Entity filters? (Choose three.)

QUESTION 58
Which role reviews the risk response and moves the Risk record into the Monitor state at the appropriate time?

QUESTION 59
What types of tasks are specific to the Audit module? (Choose four.)

QUESTION 60
The ‘Add to Update Set’ utility is available for download via:

QUESTION 61
The Citation table is a child table of which parent?

QUESTION 62
Which of the following extends from Content Table? (Choose two.)

QUESTION 63
Entity scoping is used for what?

QUESTION 64
Which tables extend the Content (sn_grc_content) table? (Choose two.)

QUESTION 65
An external audit team needs to view all of your published policies and controls? Which role can you give the team members?

QUESTION 66
Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?

QUESTION 67
The content table (sn_grcs_content) is a parent table of:

QUESTION 68
For classic risk assessment, what are the risk components that apply to the Qualitative method? (Choose two.)

QUESTION 69
What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?

QUESTION 70
For Control records, who can modify the Control in the Draft state?

QUESTION 71
Which role(s) has the capability to create Policies? Choose two.)

QUESTION 72
Possible regulations when Entity scoping for Healthcare:
(Choose two.)

QUESTION 73
In which state can reviewers either send the Policy back to draft or forward it by requesting approval?

QUESTION 74
For classic risk assessment, indicator failure factor represents the impact of risk indicator failures on what score?

QUESTION 75
The Risk Scoring values are entered on the Risk Statement. What records inherits the values from the Risk Statement?