CIS-RCI 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
Which feature would you use to track completion of certain tasks?

A.Related Lists
B.SLAs
C.Workflow Editor
D.Notifications

正解:

Question No : 2
What is a risk register?

A.Repository for all unidentified risks
B.Repository for risk frameworks
C.Repository for risk statements
D.Repository for all identified risks
E.Repository for risk criteria

正解:

Question No : 3
Which table stores the links from Policy to Control Objective?

A.[sn_compliance_m2m_policy_profile_type]
B.[sn_compliance_m2m_policy_profile]
C.[sn_compliance_m2m_policy_statement]
D.[sn_compliance_m2m_statement_profile_type]

正解:

Question No : 4
What is the minimum role required to create a risk assessment methodology (RAM)?

A.sn_compliance.admin
B.sn_risk.user
C.sn_risk.manager
D.sn_risk.admin

正解:

Question No : 5
Which of the following extends from Document Table? (Choose two.)

A.Citation
B.Policy
C.Control Objective
D.Authority Document

正解:

Question No : 6
Which of the following are the classic risk score types that ServiceNow tracks? (Choose three.)

A.Residual
B.Inherent
C.Calculated
D.Operational
E.Digital

正解:

Question No : 7
What is the minimum role required for creating a policy acknowledgement campaign?

A.sn_risk.user
B.sn_compliance.user
C.sn_compliance.admin
D.sn_compliance.manager
E.sn_control.owner

正解:

Question No : 8
The overall goal of Entity Classes is to:

A.To enable reporting and to support advanced risk assessment
B.Show relationships between Entities and policies and map them directly to Citations
C.Associate Control Objectives and Risk Statements with Risks and Controls
D.To provide specific information about an Entity, such as who owns the Entity

正解:

Question No : 9
To allow other applications to request a policy exception, you must complete the integration registry form.
In addition to providing the name of the registry entry, what additional information is needed to complete the form?

A.You must indicate the audience for requesting policy exceptions
B.You must indicate the intended Service Portal
C.You must indicate the policy exception target table
D.You must indicate the allowed policy acknowledgement campaigns

正解:

Question No : 10
Policies can be automatically published after which of the following occurs?

A.Related control objectives are marked active
B.Policy exception is closed
C.Policy is approved by all approvers
D.Policy is approved by one approver

正解:

Question No : 11
What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?

A.All assessment instance records are in the Monitor state
B.All assessment instance records are closed
C.All assessment instance records are deleted
D.States of the assessment instance records are irrelevant
E.All assessment instance records are canceled

正解:

Question No : 12
For classic risk assessment, while a Risk is in the Assess state, reviewers can do which of the following? (Choose two.)

A.Answer the assessment, moving the Risk to Respond
B.Set the Risk to Monitor
C.Delete the Risk
D.Set the Risk back to Draft

正解:

Question No : 13
Which of the following is the correct statement about Risk Scoring formulas?

A.SLE × ARO = ALE
B.ALE × ARO = Compliance Score
C.ALE × ARO = SLE
D.Impact × Urgency = ALE

正解:

Question No : 14
Which scheduled jobs in the GRC: Profiles scope help manage the population of Entity records? (Choose two.)

A.GRC indicator nightly run
B.GRC Entity and Risk Statement Data Collection
C.GRC Profile Generation
D.GRC Refresh Risk Scores

正解:

Question No : 15
As a customer reaches greater GRC maturity, what can we expect to see occurring across their organization? (Choose three.)

A.Single Risk and Control frameworks across enterprise available to all stakeholders
B.Reliance on spreadsheet management for risk reporting
C.Continuous real-time monitoring of control performance
D.Cross-functional process automation
E.Reactive strategies for GRC activities

正解:

ServiceNow CIS-RCI 問題練習