Online CIS-RCI Exam Dumps Help You Build Confidence

Category:

Comments:

0 Comments

Post Date:

August 11, 2025

Practicing with Certified Implementation Specialist CIS-RCI exam dumps questions can help you build confidence and reduce exam anxiety. By familiarizing yourself with the types of questions you can expect to see on the CIS-RCI Certified Implementation Specialist - Risk and Compliance exam and mastering the concepts and skills required to answer them, you can approach the exam with greater confidence and a sense of calm. Besides, CIS-RCI dumps questions can help you achieve this level of knowledge and confidence. Study free ServiceNow CIS-RCI exam dumps below.

Page 1 of 5

1. Setting up entity classes is required when using which GRC features? (Choose two.)

Setting up an object-based risk assessment

Adding to the policy exception integration registry

Assessing the impact of a regulatory feed

Leveraging classic risk assessments

Leveraging advanced risk assessments

2. Which of the following statements is true of a Risk Response task?

Only one Risk Response task can be related to a Risk at a time

Only users with the risk_manager role or higher can be assigned to a Risk Response task

The risk admin role is required to assign the Risk Response task

The Risk Response task is automatically progressed through the states using a worflow

3. In which state can reviewers either send the Policy back to draft or forward it by requesting approval?

Retired

Published

Awaiting Approval

Review

4. What additional capabilities does the Advanced Audit application provide? Choose 2 answers

Observation management

Resource plans

Cost plans

WBS structure

Auto generate of audit tasks

5. Which state is the policy in after being approved by all approvers?

Retired

Awaiting Approval

Draft

Published

Review

6. What table can be related to the Citation table with a many-to-many relationship?

Authority Document

Control Objective

Control

Risk

Policy

7. What three records need to be set-up when integrating with a provider RSS feed? (Choose three.)

Feed sources record

Provider record

Regulatory Feed record

Connection and Credentials record

Regulatory Change Task record

8. What term might a customer compliance manager use for a control objective?

Choose 2 answers

control Entity

Control Object

Control Finding

Control Template

Policy statement

9. Possible regulations when Entity scoping for Healthcare:

(Choose two.)

HITRUST

FISMA

HIPAA

HETRUST

10. When reviewing the Control Objective Table form with your customer, what are the most common choice lists to be configured? (Choose three.)

Reference

Classification

Category

Type

Description

Page 2 of 5

11. The compliance score calculation may be modified by changing which control factor?

control Mass

Control Velocity

control weight

Control Height

12. What table, along with the Policy table, is linked to the Control Objective table by a many-to-many relationship?

Entity Class

Citation

Authority Documents

Risk Framework

13. Which of the following are scoped applications related to the Risk and Compliance applications? (Choose four.)

GRC: GRC Profiles

GRC: Attestation Design

GRC: UCF Compliance

GRC: Policy and Compliance

GRC: Performance Analytics

GRC: Risk Management

14. Santa Clara Facility and Boston Facility are examples of what?

Entities

Entity Object

Entity Class

Entity Type

15. Which of the following are triggers for automatic creation of an issue? (Choose two.)

Attestation result is Not Implemented

Indicator result is Failed or Not Passed

Policy Exception Not approved

Control tests have been assigned but not tested

16. What tables can be leveraged in an indicator template?

only GRC tables in the customer's instance

Only custom tables in the customer's instance

Any table in the customer s instance

Only tables provided in the ServiceNow baseline in a customer's instance

17. Which is not a type of key compliance indicator?

Performance Analytics

Manual

Scripted

Reference

Basic

18. What new related list was added to the risk statement and entity records after migrating to advanced risk assessment?

Aggregated risk related list

Risk assessments related list

Risk tolerance related list

Assessment instances related list

19. Where does a policy get published to when it is approved?

Knowledge Summit

ServiceNow Library

Authoritative Records

Knowledge Base

20. Which GRC application would you use to determine where the organization is the most vulnerable or has the most exposure?

Vendor Risk Management

Audit Management

Policy and Compliance Management

Risk Management

Page 3 of 5

21. The content table (sn_grcs_content) is a parent table of:

sn_grc_profile

sn_risk_framework

sn_risk_definition

sn_risk_risk

22. There is a direct relationship between Entity Class and Entity Type when:

They have the same Entity Types

There is no direct relationship

They have the same Entities

They leverage the same reporting

23. What is the name of the job that generates entities from the entity filters?

GRC Cleanup

GRC Entity Generation

GRC item Generation

GRC Profile Generation

24. Which table extends from the Content Table?

Risk Record

Risk Framework

Risk Response Task

Risk Statement

25. What are some of the baseline tables commonly leveraged in Entity filters? (Choose three.)

Company [core_company]

Services [cmdb_ci_service]

Location [cmn_location]

Risk [sn_risk_risk]

Audit Engagement [sn_audit_engagement]

26. GRC Options in Interactive Filters are only available through which feature?

GRC Filtering

Metrics Reporting

Performance Analytics

Trending Analytics

27. What attributes can be set on an indicator template? Choose 2 answers

Tracking options

Visualization options

User Criteria

Alert Lies

sample size

Supporting data fields

28. Where does one go to configure the Regulatory Change Management impact assessment template?

Risk Assessment Methodologies module

Impact Assessment Flow in Flow Designer

Impact Assessment Templates module

Risk Assessment Templates module

29. What roles can create a policy?

Choose 2 answers

Risk Manager

Compliance User

compliance Reader

GRC Business User

compliance Manager

30. What baseline criteria determine when notifications are triggered in relation to audit tasks? (Choose two.)

Expiration

At 50% completion

Reassignment

Due date change

Page 4 of 5

31. What is the minimum role required for creating a policy acknowledgement campaign?

sn_risk.user

sn_compliance.user

sn_compliance.admin

sn_compliance.manager

sn_control.owner

32. What type of customers may you encounter? (Choose three.)

Organization recently acquired and had some bad audit findings (using ServiceNow GRC to help restart their process)

Organization with little to nothing in place already (implementing one or more core ServiceNow GRC applications)

Organization undergoing a full GRC transformation (implementing all three core ServiceNow GRC applications at once or in a phased approach)

Organization implementing ServiceNow GRC to help ease their Customer Service organization (using other tools to manage other processes)

Organization implementing ServiceNow GRC to help ease their Help Desk organization (using other tools to manage other processes)

33. How does GRC: Policy and Compliance Management track compliance to Authority Documents?

Citations are mapped to entity-scoped controls, which are tested as compliant or non-compliant.

Authority Documents are mapped to individual policies, which are either marked compliant or non-compliant.

Authority Documents are mapped to control objectives and compliance is checked when controls are tested as compliant or non-compliant.

Citations are mapped to control objectives, and compliance is checked when controls are tested as compliant or non-compliant.

34. If you create a control manually and later decide to create them automatically, what will be the result?

ServiceNow will delete the manually created control

ServiceNow creates a duplicate control and notifies the control owner

ServiceNow creates a duplicate control without notifying the control owner

ServiceNow identifies the control and does not create a duplicate

35. Policies can be automatically published after which of the following occurs?

Related control objectives are marked active

Policy exception is closed

Policy is approved by all approvers

Policy is approved by one approver

36. Who can move a Policy into Review? (Choose two.)

sys admin

policy approver

policy reviewer

policy owner

37. Which of the following are a part of the GRC: Advanced Risk scope? (Choose two.)

Risk Hierarchy

Risk Assessment Methodologies

Risk Criteria Matrix

Risk Framework

38. Control indicators may be triggered or scheduled in which state?

Retired

Monitor

Review

Attest

Draft

39. What GRC module would you access in order to update Entity Types?

Risk > Entities

Scoping > Profiles

Scoping > Entity Types

CMDB

40. The SOX content pack includes a series of policies, control, risks.

How are all of these components linked together?

Mapping File

Manually

Automatically

Batch import

Page 5 of 5

41. What table can assist in identifying all the components of a scoped application?

sys_db_object

sys.app.. module

sys.metadata

sys.properties

42. What are the terms for level of risk before and after any actions are taken? (Choose two.)

Operational risk

Digital risk

Inherent risk

Calculated risk

Residual risk

Solutioned risk

43. Which one of the following is not a trigger for issue creation?

Manual issue created by any manager or admin role as well as by audit user

Indicator failure

Risk assessment returns the inherent and residual risk impact as ‘Very High’

Attestation returns the result as ‘Not Implemented’

Control effectiveness is ‘Ineffective’ and the state of control test is ‘Closed Complete’

44. What choices do implementers have when configuring an audience for policy acknowledgements? Choose 3 answers

Select specific users

Seed specific groups

User Criteria

ACLs

Define conditions against the Group table

Define conditions against the User table

45. Which filter navigation syntax displays the table in list view within a separate browser tab?

Tablename_LIST

Tablename.list

Tablename.LIST

Tablename.List

46. Who can move a Policy record from Review into the next state?

The sys admin

The compliance manager

Any reviewer

The named policy owner

47. What would you leverage in order to provide users with an alternate user experience to view policies, create policy exceptions, and search for controls?

Help Desk Portal

Catalog Portal

Access Portal

Service Portal

48. What applications other than GRC: Policy and Compliance Management and GRC: Risk Management are part of ServiceNow Governance, Risk, and Compliance (GRC) suite of applications? Choose 2 answers

Incident Management

Privacy Management

Business Continuity Management

Project Management

Now Assist

49. What must an implementer configure to allow users to submit a policy exception from a non-GRC application like Security Operations? Choose 2 answers

Approval rules

Exception questionnaire

Exception risk rules

Integration registry

verification rules

50. What actions does the GRC Business User Lite role allow a user to take? Choose 2 answers

Group control attestations

Approve an Advanced Risk assessment

Read a policy exception

Create a risk assessment

Group issues

TAGS:

CIS-RCI, CIS-RCI exam dumps

Notify of

Label

Name*

Email*

Website

Label

Name*

Email*

Website

0 Comments

Oldest

Newest Most Voted

Inline Feedbacks

View all comments

Get CIS-RCI Dumps Full Version

Q&As: 165
Versions: PDF and Software Download Now

About Dumpsinfo

Dumpsinfo is a good platform providing the latest exam information and dumps questions for all IT certification exams. You can study all the latest exam dumps questions online.

[email protected]

Mon - Sat 9:00am - 6:00pm

Online CIS-RCI Exam Dumps Help You Build Confidence

Related

Posts

Prepare CTA Exam with Using CTA Dump Questions

Improve Your Knowledge with CIS-EM Exam Dumps

Online CIS-EM Dumps Help You Understand Questions Well

CIS-Discovery Online Dumps Boost Your Career

About Us

EMAIL

Services

Opening Hours