CIS-RC Practice Test

CIS-RC Practice Test practice questions, page 8 of 12, with answer review and explanations.

Question 36

What are the four values leveraged for the Inherent and Residual Risk Score Types?

  1. Impact, Probability, SLE, ARO
  2. Impact, Likelihood, SLE, ALE
  3. Impact, Likelihood, SLE, Score
  4. Impact, Likelihood, SLE, ARO

Question 37

What would you leverage in order to provide users with an alternate user experience to view policies, create policy exceptions, and search for controls?

  1. Help Desk Portal
  2. Catalog Portal
  3. Access Portal
  4. Service Portal

Question 38

What type of customers may you encounter? (Choose three.)

  1. Organization recently acquired and had some bad audit findings (using ServiceNow GRC to help restart their process)
  2. Organization with little to nothing in place already (implementing one or more core ServiceNow GRC applications)
  3. Organization undergoing a full GRC transformation (implementing all three core ServiceNow GRC applications at once or in a phased approach)
  4. Organization implementing ServiceNow GRC to help ease their Customer Service organization (using other tools to manage other processes)
  5. Organization implementing ServiceNow GRC to help ease their Help Desk organization (using other tools to manage other processes)

Question 39

Possible regulations when Entity scoping for Healthcare: (Choose two.)

  1. HITRUST
  2. FISMA
  3. HIPAA
  4. HETRUST

Question 40

For Control records, who can modify the Control in the Draft state?

  1. All compliance users
  2. Only the Compliance Manager
  3. Only the person assigned the Attestation
  4. Only Control Owners