CIS-RC Online Practice Questions and Answers

Why would you create Entity classes?

A. To show relationships between tables or objects you are tracking that doesn't otherwise exist anywhere in ServiceNow

B. To be assigned to risk statements, which generate risks for every Entity listed in the Entity Class

C. To be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class

D. To show relationships between Entities and Policies and map them directory to Citations

The Tablename.config:

A. Displays the configuration list view of the table in the browser tab

B. Displays the table in list view within the Content Frame

C. Displays the table in list view within a separate browser tab

D. Displays the configuration list view of the table in the Content Frame

Which filter navigation syntax displays the table in list view within a separate browser tab?

A. Tablename_LIST

B. Tablename.list

C. Tablename.LIST

D. Tablename.List

What table extends from Document Table?

A. Risk

B. Risk Framework

C. Risk Response Task

D. Risk Statement

Where does a policy get published to when it is approved?

A. Knowledge Summit

B. ServiceNow Library

C. Authoritative Records

D. Knowledge Base

You are working with your customer to determine necessary audit management workflow configurations. What should they know about the approval process for audit engagements? (Choose three.)

A. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.

B. If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.

C. If the engagement is rejected, it automatically moves back to the Fieldwork state.

D. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.

E. If the engagement is rejected, it automatically moves into the Scope state.

The Risk thresholds in the Risk Criteria Matrix (default values) do not line up with company needs. What should you do?

A. Configure the Risk Criteria in ServiceNow

B. Identify Risk that will benefit from the default values

C. Demonstrate Risk scoring scenarios using the default values

D. Use the default values to determine new company approach

In which state can reviewers either send the Policy back to draft or forward it by requesting approval?

A. Retired

B. Published

C. Awaiting Approval

D. Review

When calculating compliance scores, what is true about the weighting of Controls? (Choose two.)

A. Controls are not weighted equally by default

B. The weight cannot be changed

C. The default value is 10

D. The weight of the Control is set when the Control is created

Which role reviews the risk response and moves the Risk record into the Monitor state at the appropriate time?

A. Risk Manager

B. Risk User

C. Risk Reader

D. Risk Owner