CIS-VRM Practice Test

Review 60 CIS-VRM practice questions with answer explanations and community insights.

Question 1

Which of the following is an objective of Vendor Risk Management? (Choose two.)

  1. To help vendors improve their security posture and preparedness
  2. To assess and manage the risk from interactions with vendors and third parties
  3. To help negotiate the best possible price for a product or service from the vendor
  4. To verify that vendors have adequate measures and processes in place to ensure profitability of vendor

Question 2

The Vendor records are stored in which table?

  1. Company [core_company]
  2. Department [cmn_department]
  3. Task [task]
  4. User [sys_user]

Question 3

Internal roles include: (Choose three.)

  1. Vendor Contact sn_vdr_risk.vendor_contact
  2. Vendor Risk Manager sn_vdr_risk_asmt.vendor_risk_manager
  3. Primary Vendor Contact sn_vdr_risk_asmt.prim_vendor_contact
  4. Vendor Risk Assessor sn_vdr_risk_asmt.vendor_assessor
  5. Vendor Risk Reviewer sn_vdr_risk_asmt.vendor_assessment_reviewer

Question 4

Roles preceded by sn_vdr_risk are for which scope?

  1. GRC: Vendor Risk Remediation
  2. GRC: Vendor Risk Core
  3. GRC: Risk Management
  4. GRC: Vendor Risk Management

Question 5

Before any changes to the configuration of an application are made, it is recommended that the correct update set and application scope are selected. What role is required for this functionality?

  1. The Vendor Administrator role is required for this functionality
  2. The Data Administrator role is required for this functionality
  3. The User Administrator role is required for this functionality
  4. The System Administrator role is required for this functionality