Labour Day Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Question # 4

Which of the following roles can create a policy? (Choose two.)

A.

Audit User

B.

Compliance User

C.

Compliance Manager

D.

Risk User

E.

Compliance Reader

Full Access
Question # 5

What would you leverage in order to provide users with an alternate user experience to view policies, create

policy exceptions, and search for controls?

A.

Help Desk Portal

B.

Catalog Portal

C.

Access Portal

D.

Service Portal

Full Access
Question # 6

How can you get the SOX content pack?

A.

ServiceNow Store

B.

Patch Update

C.

Platform Upgrade

D.

Professional Services

Full Access
Question # 7

What new related list was added to the risk statement and entity records after migrating to advanced risk assessment?

A.

Aggregated risk related list

B.

Risk assessments related list

C.

Risk tolerance related list

D.

Assessment instances related list

Full Access
Question # 8

What happens when you assign an Entity Type to a Control Objective?

A.

An assessment is automatically generated to test each Entity listed in the Entity Type

B.

A policy is created automatically for every Entity listed in the Entity Type

C.

A control is automatically generated for every Entity listed in the Entity Type

D.

The Entity Type presents a compliance score and controls tied to it

Full Access
Question # 9

The Citation table is a child table of which parent?

A.

Content

B.

Authority Document

C.

Item

D.

Document

Full Access
Question # 10

Which feature would you use to track completion of certain tasks?

A.

Related Lists

B.

SLAs

C.

Workflow Editor

D.

Notifications

Full Access
Question # 11

Praveen is a Risk Manager. Why would he want to utilize Entity Types and Entities? (Choose three.)

A.

To monitor risk exposure

B.

To remediate vulnerabilities

C.

To perform risk assessments

D.

To perform policy exceptions

E.

To perform risk reporting

Full Access
Question # 12

Which of the following relationship sets are considered a many-to-many relationship? (Choose three.)

A.

Entity Type and Entity Class

B.

Indicator Template and Entity Type

C.

Control and Risk

D.

Control Objective and Entity Type

E.

Entity Type and Entity

Full Access
Question # 13

What table, along with the Policy table, is linked to the Control Objective table by a many-to-many

relationship?

A.

Entity Class

B.

Citation

C.

Authority Documents

D.

Risk Framework

Full Access
Question # 14

UCF has a collection of what? Select all UCF terms.

(Choose three.)

A.

Control Indicators

B.

Authority Documents

C.

Policies

D.

Citations

E.

Controls

Full Access
Question # 15

Which table stored the links from Entity to Entity Types?

A.

[sn_compliance_m2m_profile_profile_type]

B.

[sn_risk_m2m_risk_profile]

C.

[sn_compliance_m2m_policy_profile]

D.

[sn_grc_m2m_profile_profile_type]

Full Access
Question # 16

For classic risk assessment, indicator failure factor represents the impact of risk indicator failures on what score?

A.

Inherent ALE

B.

Calculated ALE

C.

Residual ALE

D.

Inherent SLE

Full Access
Question # 17

Santa Clara Facility and Boston Facility are examples of what?

A.

Entities

B.

Entity Object

C.

Entity Class

D.

Entity Type

Full Access
Question # 18

On which records is the entity a required field? (Choose two.)

A.

Risk

B.

Control

C.

Policy

D.

Control objective

E.

Risk statement

Full Access