[May 27, 2023] TorrentExam CIS-RCI dumps & Risk and Compliance sure practice dumps
ServiceNow CIS-RCI Actual Questions and Braindumps
The ServiceNow Certified Implementation Specialist - Risk and Compliance (CIS-RCI) certification exam is designed for professionals who are responsible for implementing and managing risk and compliance solutions using ServiceNow platform. This certification validates the individual's expertise in configuring and customizing the ServiceNow Risk and Compliance application, as well as their ability to manage compliance and risk processes in an organization. The CIS-RCI certification exam covers a wide range of topics, including risk assessment, compliance management, audit management, policy and control management, and reporting and analytics.
The CIS-RCI exam covers a variety of topics, including risk identification, assessment, analysis, and mitigation, compliance management, and reporting. Candidates will be tested on their ability to configure ServiceNow applications, integrate with third-party applications, and create custom reports to meet business requirements. The exam also evaluates a candidate's understanding of industry best practices and regulatory frameworks, such as GDPR, HIPAA, and ISO 27001.
NEW QUESTION # 28
Praveen is a Risk Manager. Why would he want to utilize Entity Types and Entities? (Choose three.)
- A. To remediate vulnerabilities
- B. To monitor risk exposure
- C. To perform risk reporting
- D. To perform risk assessments
- E. To perform policy exceptions
Answer: B,D,E
NEW QUESTION # 29
What baseline criteria determine when notifications are triggered in relation to audit tasks? (Choose two.)
- A. Expiration
- B. Reassignment
- C. At 50% completion
- D. Due date change
Answer: A,B
NEW QUESTION # 30
Control indicators may be triggered or scheduled in which state?
- A. Monitor
- B. Attest
- C. Draft
- D. Review
- E. Retired
Answer: B
NEW QUESTION # 31
Which filter navigation syntax displays the default form view of the Risk table in the Content Frame?
- A. sn_risk_risk.FORM
- B. sn_risk_risk.list
- C. sn_risk_risk.form
- D. sn_risk_risk.LIST
Answer: A
NEW QUESTION # 32
What types of tasks are specific to the Audit module? (Choose four.)
- A. Control Test
- B. Control Attestation
- C. Interview
- D. Walkthrough
- E. Activity
- F. Remediation
Answer: C,D,E,F
NEW QUESTION # 33
What would you use in order to accommodate a customer's unique process around policy approvals? For example, each policy needs a second layer of approval.
- A. Create a new field and create notifications
- B. Add a UI Action to track who the stakeholders are
- C. Add a new related list to keep track of who has already approved it and who hasn't approved yet
- D. Create a new workflow in the workflow editor
Answer: A
NEW QUESTION # 34
Which of the following are scoped applications related to the Risk and Compliance applications? (Choose four.)
- A. GRC: Risk Management
- B. GRC: Attestation Design
- C. GRC: Performance Analytics
- D. GRC: UCF Compliance
- E. GRC: GRC Profiles
- F. GRC: Policy and Compliance
Answer: A,B,C,F
NEW QUESTION # 35
The Citation table is a child table of which parent?
- A. Content
- B. Item
- C. Document
- D. Authority Document
Answer: D
Explanation:
Explanation/Reference: https://community.servicenow.com/community?
id=community_question&sys_id=ad77b570db309bcc2e247a9e0f96192f
NEW QUESTION # 36
What table extends from Document Table?
- A. Risk
- B. Risk Statement
- C. Risk Framework
- D. Risk Response Task
Answer: A
NEW QUESTION # 37
Why would you create Entity classes?
- A. To be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class
- B. To show relationships between tables or objects you are tracking that doesn't otherwise exist anywhere in ServiceNow
- C. To be assigned to risk statements, which generate risks for every Entity listed in the Entity Class
- D. To show relationships between Entities and Policies and map them directory to Citations
Answer: A
NEW QUESTION # 38
Critical parts of a successful GRC implementation are understanding the customers current: (Choose three.)
- A. Risk and Compliance personas
- B. Data breaches
- C. Audit failures
- D. GRC processes
- E. Regulatory requirements
Answer: B,D,E
NEW QUESTION # 39
For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)
- A. Controls are identified from library
- B. Controls are identified from related issues
- C. Controls are identified from library and ad-hoc
- D. Controls are identified ad-hoc
- E. Controls are identified from indicator results
Answer: A,C,D
NEW QUESTION # 40
Which of the following are triggers for automatic creation of an issue? (Choose two.)
- A. Policy Exception Not approved
- B. Indicator result is Failed or Not Passed
- C. Control tests have been assigned but not tested
- D. Attestation result is Not Implemented
Answer: C,D
NEW QUESTION # 41
Possible regulations when Entity scoping for Healthcare:
(Choose two.)
- A. FISMA
- B. HETRUST
- C. HIPAA
- D. HITRUST
Answer: C,D
NEW QUESTION # 42
What three records need to be set-up when integrating with a provider RSS feed? (Choose three.)
- A. Feed sources record
- B. Provider record
- C. Regulatory Change Task record
- D. Connection and Credentials record
- E. Regulatory Feed record
Answer: C,D
NEW QUESTION # 43
Which tables extend from the Task table? (Choose two.)
- A. Risk Statement
- B. Risk Framework
- C. Risk
- D. Risk Event
- E. Risk Response Task
Answer: A
NEW QUESTION # 44
Which of the following are a part of the GRC: Advanced Risk scope? (Choose two.)
- A. Risk Assessment Methodologies
- B. Risk Criteria Matrix
- C. Risk Framework
- D. Risk Hierarchy
Answer: A,D
NEW QUESTION # 45
When calculating compliance scores, what is true about the weighting of Controls? (Choose two.)
- A. The weight cannot be changed
- B. The default value is 10
- C. Controls are not weighted equally by default
- D. The weight of the Control is set when the Control is created
Answer: B,D
Explanation:
Explanation/Reference: https://community.servicenow.com/community?
id=community_question&sys_id=bc450789dbf393802be0a851ca961948
NEW QUESTION # 46
Which of the following extends from Document Table? (Choose two.)
- A. Control Objective
- B. Policy
- C. Authority Document
- D. Citation
Answer: B,D
NEW QUESTION # 47
For classic risk assessment, indicator failure factor represents the impact of risk indicator failures on what score?
- A. Calculated ALE
- B. Residual ALE
- C. Inherent SLE
- D. Inherent ALE
Answer: A,D
NEW QUESTION # 48
GRC Options in Interactive Filters are only available through which feature?
- A. GRC Filtering
- B. Metrics Reporting
- C. Performance Analytics
- D. Trending Analytics
Answer: C
NEW QUESTION # 49
Which GRC tables serve as primary parent tables for the GRC applications? (Choose three.)
- A. Document
- B. Asset
- C. Item
- D. Content
- E. Task
Answer: A,D,E
NEW QUESTION # 50
......
Latest CIS-RCI Pass Guaranteed Exam Dumps with Accurate & Updated Questions: https://dumpscertify.torrentexam.com/CIS-RCI-exam-latest-torrent.html
