ServiceNow Certified Implementation Specialist — Risk and Compliance practice questions

1. Question 1 of 25

   Which role is not part of ServiceNow GRC?

   • ARisk User
   • BRisk Developer
   • CRisk Manager
   • DRisk Reader

   Show answer

   Correct answer: B

   How others answered

   • B100%

2. Question 2 of 25

   Select 4

   What are some characteristics of the ServiceNow Store? (Choose four.)

   • ASome applications are certified by ServiceNow
   • BAll applications are certified by ServiceNow
   • CApplications may be developed by ServiceNow Technology Partners
   • DIt houses both paid and free applications and integrations
   • EApplications are built om the ServiceNow platform
   • FApplications are certified by other developers

   Show answer

   Correct answer: B, C, D, E

   How others answered

   • BCDE100%

3. Question 3 of 25

   Which of the following statements is true of a Risk Response task?

   • AOnly one Risk Response task can be related to a Risk at a time
   • BOnly users with the risk_manager role or higher can be assigned to a Risk Response task
   • CThe risk admin role is required to assign the Risk Response task
   • DThe Risk Response task is automatically progressed through the states using a workflow

   Show answer

   Correct answer: D

   How others answered

   • D57%
   • A43%

   Only 57% agreed on this answer — treat it as contested rather than settled.

4. Question 4 of 25

   Select 3

   Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)

   • ADocument
   • BPolicy
   • CRisk
   • DContent
   • EIndicator

   Show answer

   Correct answer: A, D, E

   How others answered

   • ADE100%

5. Question 5 of 25

   Why would you create Entity classes?

   • ATo show relationships between tables or objects you are tracking that doesn’t otherwise exist anywhere in ServiceNow
   • BTo be assigned to risk statements, which generate risks for every Entity listed in the Entity Class
   • CTo be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class
   • DTo show relationships between Entities and Policies and map them directory to Citations

   Show answer

   Correct answer: A

   How others answered

   • A100%

6. Question 6 of 25

   What table, along with the Policy table, is linked to the Control Objective table by a many-to-many relationship?

   • AEntity Class
   • BCitation
   • CAuthority Documents
   • DRisk Framework

   Show answer

   Correct answer: B

   How others answered

   • B79%
   • C21%

7. Question 7 of 25

   Which of the following extends from items?

   • ACitation
   • BControls
   • CIssue
   • DPolicy

   Show answer

   Correct answer: B

   How others answered

   • B100%

8. Question 8 of 25

   The Tablename.config:

   • ADisplays the configuration list view of the table in the browser tab
   • BDisplays the table in list view within the Content Frame
   • CDisplays the table in list view within a separate browser tab
   • DDisplays the configuration list view of the table in the Content Frame

   Show answer

   Correct answer: D

   How others answered

   • D88%
   • A13%

9. Question 9 of 25

   There is a direct relationship between Entity Class and Entity Type when:

   • AThey have the same Entity Types
   • BThere is no direct relationship
   • CThey have the same Entities
   • DThey leverage the same reporting

   Show answer

   Correct answer: B

   How others answered

   • B100%

10. Question 10 of 25

    Which filter navigation syntax displays the table in list view within a separate browser tab?

    • ATablename_LIST
    • BTablename.list
    • CTablename.LIST
    • DTablename.List

    Show answer

    Correct answer: C

    How others answered

    • C100%

11. Question 11 of 25

    What happens when you assign an Entity Type to a Risk Statement?

    • AAn assessment will be automatically generated to test each Entity listed in the Entity Type
    • BA risk assessment is created automatically for every Entity listed in the Entity Type
    • CA risk is automatically generated for every Entity listed in the Entity Type
    • DThe Entity is now going to present a risk score and controls are going to be tied to it

    Show answer

    Correct answer: C

    How others answered

    • C88%
    • B13%

12. Question 12 of 25

    Select 2

    Jim is an Audit Manager. In addition to Audit Manager, which roles should be assigned to ensure he can manage the audit process as well as other GRC functions related to audit? (Choose two.)

    • Asn_grc.manager
    • Bsn_audit.user
    • Csn_grc.user
    • Dsn_grc.reader
    • Esn_grc.developer

    Show answer

    Correct answer: A, B

    How others answered

    • AB60%
    • AC40%

    Only 60% agreed on this answer — treat it as contested rather than settled.

13. Question 13 of 25

    Select 2

    Which tables extend the Content (sn_grc_content) table? (Choose two.)

    • Asn_compliance_citation
    • Bsn_grc_issue
    • Csn_compliance_policy_statement
    • Dsn_risk_risk

    Show answer

    Correct answer: A, C

    How others answered

    • AC100%

14. Question 14 of 25

    Select 4

    Which of the following are scoped applications related to the Risk and Compliance applications? (Choose four.)

    • AGRC: GRC Profiles
    • BGRC: Attestation Design
    • CGRC: UCF Compliance
    • DGRC: Policy and Compliance
    • EGRC: Performance Analytics
    • FGRC: Risk Management

    Show answer

    Correct answer: A, C, D, F

    How others answered

    • ACDF100%

15. Question 15 of 25

    What table extends from Document Table?

    • ARisk
    • BRisk Framework
    • CRisk Response Task
    • DRisk Statement

    Show answer

    Correct answer: B

    How others answered

    • B100%

16. Question 16 of 25

    All of the following are PARENT tables which exist within the GRC Entities application scope EXCEPT.

    • AItem
    • BDocument
    • CContent
    • DIndicator

    Show answer

    Correct answer: D

    How others answered

    • D100%

17. Question 17 of 25

    Which table stored the links from Entity to Entity Types?

    • A[sn_compliance_m2m_profile_profile_type]
    • B[sn_risk_m2m_risk_profile]
    • C[sn_compliance_m2m_policy_profile]
    • D[sn_grc_m2m_profile_profile_type]

    Show answer

    Correct answer: D

    How others answered

    • D100%

18. Question 18 of 25

    What GRC module would you access in order to update Entity Types?

    • ARisk > Entities
    • BScoping > Profiles
    • CScoping > Entity Types
    • DCMDB

    Show answer

    Correct answer: C

    How others answered

    • C100%

19. Question 19 of 25

    The ServiceNow Platform requires which external components in order to ingest data from other systems?

    • AThe platform includes an SDK template that allows developers to enhance it using Java
    • BA messaging bus needs to be developed
    • CThe platform allows XML to be ingested, and it required developers to leverage XSLT to map it properly
    • DThe platform has Integration Service that allow users and developers to ingest data from a variety of sources

    Show answer

    Correct answer: D

    How others answered

    • D100%

20. Question 20 of 25

    Where does a policy get published to when it is approved?

    • AKnowledge Summit
    • BServiceNow Library
    • CAuthoritative Records
    • DKnowledge Base

    Show answer

    Correct answer: D

    How others answered

    • D100%

21. Question 21 of 25

    Select 3

    You are working with your customer to determine necessary audit management workflow configurations. What should they know about the approval process for audit engagements? (Choose three.)

    • AIf the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.
    • BIf the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.
    • CIf the engagement is rejected, it automatically moves back to the Fieldwork state.
    • DIf the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.
    • EIf the engagement is rejected, it automatically moves into the Scope state.

    Show answer

    Correct answer: A, B, C

    How others answered

    • ABC100%

22. Question 22 of 25

    Select 2

    What are the Risk Scoring methods available in ServiceNow? (Choose two.)

    • AQuantitative
    • BQualitative
    • CInherent
    • DResidual
    • ECalculated

    Show answer

    Correct answer: A, B

    How others answered

    • AB86%
    • CD14%

23. Question 23 of 25

    The Risk thresholds in the Risk Criteria Matrix (default values) do not line up with company needs. What should you do?

    • AConfigure the Risk Criteria in ServiceNow
    • BIdentify Risk that will benefit from the default values
    • CDemonstrate Risk scoring scenarios using the default values
    • DUse the default values to determine new company approach

    Show answer

    Correct answer: A

    How others answered

    • A100%

24. Question 24 of 25

    Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?

    • AAudit Management
    • BRisk Management
    • CVendor Risk Management
    • DPolicy and Compliance Management

    Show answer

    Correct answer: A

    How others answered

    • D50%
    • A50%

    Most people chose D, not A. Verify this one against the vendor documentation.

25. Question 25 of 25

    Control Failure Factor represents the impact of Control Failures on what score?

    • AInherent
    • BResidual
    • CTotal
    • DCalculated

    Show answer

    Correct answer: D

    How others answered

    • D100%

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CIS-RC practice, question 1 of 25