CIS-RC Practice Test

CIS-RC Practice Test practice questions, page 10 of 12, with answer review and explanations.

Question 46

As a customer reaches greater GRC maturity, what can we expect to see occurring across their organization? (Choose three.)

  1. Single Risk and Control frameworks across enterprise available to all stakeholders
  2. Reliance on spreadsheet management for risk reporting
  3. Continuous real-time monitoring of control performance
  4. Cross-functional process automation
  5. Reactive strategies for GRC activities

Question 47

Which scheduled jobs in the GRC: Profiles scope help manage the population of Entity records? (Choose two.)

  1. GRC indicator nightly run
  2. GRC Entity and Risk Statement Data Collection
  3. GRC Profile Generation
  4. GRC Refresh Risk Scores

Question 48

Which of the following is the correct statement about Risk Scoring formulas?

  1. SLE × ARO = ALE
  2. ALE × ARO = Compliance Score
  3. ALE × ARO = SLE
  4. Impact × Urgency = ALE

Question 49

For classic risk assessment, while a Risk is in the Assess state, reviewers can do which of the following? (Choose two.)

  1. Answer the assessment, moving the Risk to Respond
  2. Set the Risk to Monitor
  3. Delete the Risk
  4. Set the Risk back to Draft

Question 50

What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?

  1. All assessment instance records are in the Monitor state
  2. All assessment instance records are closed
  3. All assessment instance records are deleted
  4. States of the assessment instance records are irrelevant
  5. All assessment instance records are canceled