Questions for the CIS-RCI were updated on : Dec 26 ,2025
Page 1 out of 11. Viewing questions 1-15 out of 165
Question 1
It an implementer warned to roll-up the qualitative values for a risk assessment methodology, what field would they update on the RAM?
A. Calculate score based on
B. Roll-up Annualized Loss Expectancy
C. Calculate ale based on
D. Roll-up scores
Answer:
D
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 2
The compliance score calculation may be modified by changing which control factor?
A. control Mass
B. Control Velocity
C. control weight
D. Control Height
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 3
What table can assist in identifying all the components of a scoped application?
A. sys_db_object
B. sys.app.. module
C. sys.metadata
D. sys.properties
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 4
What actions does an implementer need to take to configure confidentiality? Choose 3 answers
A. configure fields to be included in confidentiality
B. Review and update inheritance
C. Configure which tables inherit the confidentiality setting
D. Review and update master users
E. Review and update allowed users
Answer:
A, B, C
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
0/ 1000
Question 5
What is the minimum role needed to maintain entity types? Choose 2 answers
A. Risk user
B. Risk Admin
C. compliance user
D. Compliance Manager
E. Risk Manager
F. Compliance Admin
Answer:
D, E
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
F
50%
Discussions
0/ 1000
Question 6
An audit issue cannot be closed if what related records are still active?
A. Activity task
B. Remediation task
C. Risk
D. Control
E. Evidence task
Answer:
B
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
0/ 1000
Question 7
What table is an implementer's starting point to meet a customer requirement to generate a report related to a specific policy acknowledgement campaign?
A. sn_grc_audience
B. sn_compliance_policy
C. sn_compliance_pollcy_acknowledgementjnstance
D. sn_compllance_policy_acknowledgement
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 8
What tables can be leveraged in an indicator template?
A. only GRC tables in the customer's instance
B. Only custom tables in the customer's instance
C. Any table in the customer s instance
D. Only tables provided in the ServiceNow baseline in a customer's instance
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 9
Which control states are included in the compliance score calculation? Choose 3 answers
A. Monitor
B. Retire
C. Review
D. Attest
E. Draft
Answer:
A, C, D
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
0/ 1000
Question 10
What type of GRC record would generate for the departments of Sales, Operations, or IT?
A. Entity types
B. Entity classes
C. Entitles
D. Entity objects
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 11
What methods are used to create common controls?
A. Convert a standard control
B. Create a common control as a child of a standard control
C. Create a common control
D. Create a common control as a child of a control objective
Answer:
A
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 12
What attributes can be set on an indicator template? Choose 2 answers
A. Tracking options
B. Visualization options
C. User Criteria
D. Alert Lies
E. sample size
F. Supporting data fields
Answer:
A, B
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
F
50%
Discussions
0/ 1000
Question 13
Which state is the policy in after being approved by all approvers?
A. Retired
B. Awaiting Approval
C. Draft
D. Published
E. Review
Answer:
D
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
Discussions
0/ 1000
Question 14
Which roles does ServiceNow advise against assigning directly to a group or user? Choose 2 answers
A. sn_grc.user
B. sn_grc.business_user
C. sn_grc.reader
D. sn_grc_bus_user_lite
Answer:
A, C
User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
0/ 1000
Question 15
What is associated with the control objective, that is active with the setting to create controls automatically enabled, to generate controls?