Question 1

To what type of assessment record can a vendor contact respond?

Options :

A : Vendor tiering assessment

B : Vendor risk assessment

C : Customer assessment

D : External monitoring assessment

Answer: B

Question 2

What are some of the purposes of a Vendor Risk Issue? (Choose two.)

Options :

A : Log access-related incidents for the vendor portal

B : Indicate vendors that need further assessment

C : Accept risks identified in the assessment

D : Track remediation of compliance gaps

Answer: B,D

Question 3

On the Contact record, there is a field for the Vendor name. This is which field (with a label change) from the sys_user table?

Options :

A : sn_vendor

B : company_name

C : company

D : vendor_name

Answer: D

Question 4

Which of the following are functions of the Vendor Risk Assessor? (Choose three.)

Options :

A : Enable communications across vendors

B : Access completed assessments from vendors

C : Update vendor contract deadlines

D : Create issues for the vendor

E : Create a Primary Contact record for a Vendor

Answer: A,D

Question 5

During the Generating Observations phase of the Vendor Risk Assessment, what action might be taken by the Risk Assessor?

Options :

A : Create issues from the assessment if necessary

B : Update the vendor risk score

C : Email the vendor

D : Answer questions the vendor forgot to answer

Answer: A

Free CIS-TPRM Mock Exam – Practice Online Confidently