Question 1

You have imported risks in Financial Reporting Compliance using data migration. Your client is asking if youcan add controls for these risks.Which two statements are true? (Choose two.)

Options :

A : To relate controls to risks, the risks must be in “approved” state.

B : You cannot use the Data Migration tool to add control records to map to existing risks.

C : You can use the Data Migration tool to add control records for the existing risks.

D : To relate controls, risks must be assigned to the same perspective that is assigned to the control you want to map it to.

E : You can manually add control definitions and relate them to the risks in Financial Reporting Compliance.

Answer: C,D

Question 2

You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in yourclient’s organization. But, there are two problems with his or her security configuration.Problem 1: This person should not receive notifications to complete control assessments, but currently he orshe does.Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable toaccess controls created for individual regions within EMEA.You have given him or her the following job role:EMEA P2P Control Manager Job RoleSeeded Control Manager Duty CompositeSeeded Control Certification Assessor Duty CompositeEMEA P2P Control Manager Data Security PolicySeeded Control Manager Data Security PolicyPerspective filter where Region Perspective “equals” EMEAPerspective filter where Process Perspective “equals” P2PWhich two actions need to be taken to correct the problems? (Choose two.)

Options :

A : Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.

B : Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.

C : Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.

D : While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.

Answer: C,D

Question 3

How do you add values to a Risk Type list of values?

Options :

A : Populate the Import template with the new values in the Issue Severity column on the Controls tab.

B : Add the lookup codes to the GRC_RISK_TYPE Lookup Type.

C : Because you cannot add new values, update one of the existing lookup codes to what the client wants it to be.

D : Add the lookup codes to the GRCM_RISK_TYPE Lookup Type.

E : Use the default lookup codes because there is no way to update the existing ones.

Answer: D

Question 4

Which controls can user A manage for the following Control Manager role Configuration? See details of perspective trees and control-perspective association below. Capture

Options :

A : All controls

B : Controls 2 and 4

C : Controls 1, 2, and 4

D : None

E : Controls 1 and 2

Answer: A

Question 5

Your client is configuring their Test pod (which has no data) and has created their initial import template withcontrols, test plans, perspectives, and perspective-control mappings. They have used custom list of values forControl Frequency.Which three tasks must be completed before performing the data import? (Choose three.)

Options :

A : Validate that all nods on the Perspective Item tab are covered on the Perspective Hierarchy tab.

B : Validate that the control-perspective relationship has been created in Manage Module Perspectives.

C : Validate that new lookup values are created for any custom list of values.

D : Validate that there are no duplicate worksheet IDs within the same worksheet.

E : Validate that the System ID column is populated correctly.

Answer: A,C

Free 1Z0-1058-25 Mock Exam – Practice Online Confidently

Buying Options: