CIS-RC Practice Test

CIS-RC Practice Test practice questions, page 5 of 12, with answer review and explanations.

Question 21

You are working with your customer to determine necessary audit management workflow configurations. What should they know about the approval process for audit engagements? (Choose three.)

  1. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.
  2. If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.
  3. If the engagement is rejected, it automatically moves back to the Fieldwork state.
  4. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.
  5. If the engagement is rejected, it automatically moves into the Scope state.

Question 22

Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?

  1. Audit Management
  2. Risk Management
  3. Vendor Risk Management
  4. Policy and Compliance Management

Question 23

What are the Risk Scoring methods available in ServiceNow? (Choose two.)

  1. Quantitative
  2. Qualitative
  3. Inherent
  4. Residual
  5. Calculated

Question 24

The Risk thresholds in the Risk Criteria Matrix (default values) do not line up with company needs. What should you do?

  1. Configure the Risk Criteria in ServiceNow
  2. Identify Risk that will benefit from the default values
  3. Demonstrate Risk scoring scenarios using the default values
  4. Use the default values to determine new company approach

Question 25

Who can move a Policy into Review? (Choose two.)

  1. sys admin
  2. policy approver
  3. policy reviewer
  4. policy owner