CIS-RC Online Practice Questions and Answers

What are some characteristics of the ServiceNow Store? (Choose four.)

A. Some applications are certified by ServiceNow

B. All applications are certified by ServiceNow

C. Applications may be developed by ServiceNow Technology Partners

D. It houses both paid and free applications and integrations

E. Applications are built om the ServiceNow platform

F. Applications are certified by other developers

Which of the following statements is true of a Risk Response task?

A. Only one Risk Response task can be related to a Risk at a time

B. Only users with the risk_manager role or higher can be assigned to a Risk Response task

C. The risk admin role is required to assign the Risk Response task

D. The Risk Response task is automatically progressed through the states using a worflow

What table, along with the Policy table, is linked to the Control Objective table by a many-to-many relationship?

A. Entity Class

B. Citation

C. Authority Documents

D. Risk Framework

Why would you create Entity classes?

A. To show relationships between tables or objects you are tracking that doesn't otherwise exist anywhere in ServiceNow

B. To be assigned to risk statements, which generate risks for every Entity listed in the Entity Class

C. To be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class

D. To show relationships between Entities and Policies and map them directory to Citations

Where does a policy get published to when it is approved?

A. Knowledge Summit

B. ServiceNow Library

C. Authoritative Records

D. Knowledge Base

You are working with your customer to determine necessary audit management workflow configurations. What should they know about the approval process for audit engagements? (Choose three.)

A. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.

B. If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.

C. If the engagement is rejected, it automatically moves back to the Fieldwork state.

D. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.

E. If the engagement is rejected, it automatically moves into the Scope state.

Which one of the following is not a trigger for issue creation?

A. Manual issue created by any manager or admin role as well as by audit user

B. Indicator failure

C. Risk assessment returns the inherent and residual risk impact as `Very High'

D. Attestation returns the result as `Not Implemented'

E. Control effectiveness is `Ineffective' and the state of control test is `Closed Complete'

Which role(s) has the capability to create Policies? Choose two.)

A. Compliance Manager

B. Compliance admin

C. Compliance User

D. Risk Manager

The `Add to Update Set' utility is available for download via:

A. ServiceNow Developer site

B. ServiceNow store

C. ServiceNow Community

D. ServiceNow HI support

Entity scoping is used for what?

A. Make sure that all of your Entities have the right visibility

B. Create and assign controls to the correct users

C. Create, assign, and manage controls and risks across an enterprise

D. Scope out the different users and roles that have access to the platform