CIS-VRM Practice Test

CIS-VRM Practice Test practice questions, page 2 of 3, with answer review and explanations.

Question 6

What is the definition of ‘Risk Management’?

  1. Policies/Standards/Procedures established to ensure an organization is aligned with corporate strategy and expectations are clearly defined
  2. The process of conforming to standards, policies, and remediation of audit findings
  3. The elimination of vulnerable surface area in an enterprise environment
  4. Process to identify, assess, and respond to risks, threats and vulnerabilities that could compromise the business

Question 7

Which of the following is the main benefit of using the Vendor Portal?

  1. Assessments are performed via the Vendor Portal and spreadsheets
  2. More efficiently communicating Assessments with a single contact
  3. Assessments are shared through the Vendor Portal and email
  4. More efficiently completing Assessments via the Vendor Portal

Question 8

Baseline email notifications that help to automate the vendor risk management process are installed with which plugin?

  1. GRC: Vendor Risk Management
  2. GRC: Audit Management
  3. GRC: Risk Management
  4. GRC: Policy and Compliance Management

Question 9

Which statement best describes the role assignment of vendor contacts in Vendor Risk Management?

  1. When vendor contacts are created, they are automatically assigned the snc_internal role and the snc_external role
  2. When vendor contacts are created, they must be manually assigned the snc_external role
  3. When vendor contacts are created, they are automatically assigned the snc_internal role
  4. When vendor contacts are created, they are automatically assigned the snc_external role

Question 10

What can a vendor contact do in the Vendor Portal? (Choose four.)

  1. Update answers to returned questionnaires
  2. Communicate or share information with other vendors of the assessing organization
  3. Create new issues and tasks for the vendor risk assessor team
  4. Review and respond to issues created by the assessing organization
  5. Manage vendor contacts and task assignments within the vendor organization
  6. Respond to assessments sent by the assessing organization