Question 1

You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in yourclient’s organization. But, there are two problems with his or her security configuration.Problem 1: This person should not receive notifications to complete control assessments, but currently he orshe does.Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable toaccess controls created for individual regions within EMEA.You have given him or her the following job role:EMEA P2P Control Manager Job RoleSeeded Control Manager Duty CompositeSeeded Control Certification Assessor Duty CompositeEMEA P2P Control Manager Data Security PolicySeeded Control Manager Data Security PolicyPerspective filter where Region Perspective “equals” EMEAPerspective filter where Process Perspective “equals” P2PWhich two actions need to be taken to correct the problems? (Choose two.)

Options :

A : Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.

B : Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.

C : Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.

D : While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.

Answer: C,D

Question 2

You are gathering requirements on how your client performs control assessments. Which three tasks should you complete to set up assessments in Financial Reporting Compliance? (Choose three.)

Options :

A : Identify the type of assessments included in each assessment cycle.

B : Understand the sample size for each audit test.

C : Determine if control assessments are planned ahead of time or are run impromptu.

D : Determine the main objectives of deploying the control.

E : Determine whether assessments templates, plans, and completed assessments need to go through a review and approve workflow

Answer: A,B,C

Question 3

You have defined an initial Perspective Hierarchy for your client in the Advanced Controls module. Afterrefining their business requirements, your client wants to expand the existing hierarchy to include 150perspective items in various levels. For efficient processing, you decide to use the GRC data migration featureto import the new items.Which three are valid processing steps required to define the export file? (Choose three.)

Options :

A : Navigate to Risk Management Tools > Setup and Administration > Data Migration, and select Advanced Controls.

B : Generate Template as Without Data.

C : Navigate to Manage Module Perspectives.

D : Generate Template as Without Data – Perspectives Only.

E : Click the Create Import Template button.

Answer: A,B,C

Question 4

The GRC Business owner responsible for reviewing and investigating access incidents related to the “Order toCash” perspective does not see any worklists for the generated results. You have validated that:1. Other business owners are able to view their assigned worklists without any problem2. Incidents have been generated for the controls related to Order to Cash3. The business owner’s assigned roles contain the correct functional privileges and data access to the correctperspective valuesWhat is the reason the business owner cannot see any worklists for the generated incidents?

Options :

A : The Result Management Perspective Assignment has not been linked.

B : The underlying model is not linked to Order to Cash.

C : The business owner was recently assigned the role and the worklist needs to be refreshed.

D : Worklist assignment does not include the business owner.

E : The Control Perspectives are not linked to the control.

Answer: D

Question 5

How do you add values to a Risk Type list of values?

Options :

A : Populate the Import template with the new values in the Issue Severity column on the Controls tab.

B : Add the lookup codes to the GRC_RISK_TYPE Lookup Type.

C : Because you cannot add new values, update one of the existing lookup codes to what the client wants it to be.

D : Add the lookup codes to the GRCM_RISK_TYPE Lookup Type.

E : Use the default lookup codes because there is no way to update the existing ones.

Answer: D

Free 1Z0-1058-25 Mock Exam – Practice Online Confidently

Buying Options: