CIS-RC Practice Test

CIS-RC Practice Test practice questions, page 11 of 12, with answer review and explanations.

Question 51

Policies can be automatically published after which of the following occurs?

  1. Related control objectives are marked active
  2. Policy exception is closed
  3. Policy is approved by all approvers
  4. Policy is approved by one approver

Question 52

To allow other applications to request a policy exception, you must complete the integration registry form. In addition to providing the name of the registry entry, what additional information is needed to complete the form?

  1. You must indicate the audience for requesting policy exceptions
  2. You must indicate the intended Service Portal
  3. You must indicate the policy exception target table
  4. You must indicate the allowed policy acknowledgement campaigns

Question 53

The overall goal of Entity Classes is to:

  1. To enable reporting and to support advanced risk assessment
  2. Show relationships between Entities and policies and map them directly to Citations
  3. Associate Control Objectives and Risk Statements with Risks and Controls
  4. To provide specific information about an Entity, such as who owns the Entity

Question 54

What is the minimum role required for creating a policy acknowledgement campaign?

  1. sn_risk.user
  2. sn_compliance.user
  3. sn_compliance.admin
  4. sn_compliance.manager
  5. sn_control.owner

Question 55

Which of the following are the classic risk score types that ServiceNow tracks? (Choose three.)

  1. Residual
  2. Inherent
  3. Calculated
  4. Operational
  5. Digital