Question 1

The Risk thresholds in the Risk Criteria Matrix (default values) do not line up with company needs. Whatshould you do?

Options :

A : Configure the Risk Criteria in ServiceNow

B : Identify Risk that will benefit from the default values

C : Demonstrate Risk scoring scenarios using the default values

D : Use the default values to determine new company approach

Answer: A

Question 2

Possible regulations when Entity scoping for Healthcare:(Choose two.)

Options :

A : HITRUST

B : FISMA

C : HIPAA

D : HETRUST

Answer: A,C

Question 3

Why is Entity scoping important when implementing GRC? (Choose three.)

Options :

A : Auto-generates controls when control objective is scoped with entity type

B : Provides a consistent approach to setting up risks and controls

C : Allows identification of both a technical owner and a business owner

D : Dynamic in nature. As new records meet criteria, they will be added as entities

E : Provides a consistent approach to issue tracking

Answer: A,B,D

Question 4

Which of the following relationship sets are considered a many-to-many relationship? (Choose three.)

Options :

A : Entity Type and Entity Class

B : Indicator Template and Entity Type

C : Control and Risk

D : Control Objective and Entity Type

E : Entity Type and Entity

Answer: A,B,E

Question 5

Policies can be automatically published after which of the following occurs?

Options :

A : Related control objectives are marked active

B : Policy exception is closed

C : Policy is approved by all approvers

D : Policy is approved by one approver

Answer: A

Free CIS-RC Mock Exam – Practice Online Confidently