Certified Implementation Specialist – Risk and Compliance CIS-RCI Exam Questions – PassQuestion Free Questions To Test Online

1. You are working with your customer to determine necessary audit management workflow configurations .

What should they know about the approval process for audit engagements? (Choose three.)

If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.

If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.

If the engagement is rejected, it automatically moves back to the Fieldwork state.

If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.

If the engagement is rejected, it automatically moves into the Scope state.

2. Which one of the following is not a trigger for issue creation?

Manual issue created by any manager or admin role as well as by audit user

Indicator failure

Risk assessment returns the inherent and residual risk impact as ‘Very High’

Attestation returns the result as ‘Not Implemented’

Control effectiveness is ‘Ineffective’ and the state of control test is ‘Closed Complete’

3. Entity scoping is used for what?

Make sure that all of your Entities have the right visibility

Create and assign controls to the correct users

Create, assign, and manage controls and risks across an enterprise

Scope out the different users and roles that have access to the platform

4. Jim is an Audit Manager.

In addition to Audit Manager, which roles should be assigned to ensure he can manage the audit process as well as other GRC functions related to audit? (Choose two.)

sn_grc.manager

sn_audit.user

sn_grc.user

sn_grc.reader

sn_grc.developer

5. Which role is not part of ServiceNow GRC?

Risk User

Risk Developer

Risk Manager

Risk Reader

6. Control Failure Factor represents the impact of Control Failures on what score?

Inherent

Residual

Total

Calculated

7. What table extends from Document Table?

Risk

Risk Framework

Risk Response Task

Risk Statement

8. The Risk Scoring values are entered on the Risk Statement .

What records inherits the values from the Risk Statement?

Risk Criteria Matrix

Risk Framework

Registered Risk

Risk Response Issue

9. There is a direct relationship between Entity Class and Entity Type when:

They have the same Entity Types

There is no direct relationship

They have the same Entities

They leverage the same reporting

10. Possible regulations when Entity scoping for Healthcare: (Choose two.)

HITRUST

FISMA

HIPAA

HETRUST

Question 1 of 10

Certified Implementation Specialist – Risk and Compliance CIS-RCI Exam Questions

Test Online Certified Implementation Specialist – Risk and Compliance CIS-RCI Free Questions

Leave a Reply Cancel reply