10 free sample questions from a bank of 296, with the correct answers and explanations. No signup required — start practising right now.
1Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)
Document
Policy
Risk
Content
Indicator
Answer: A, D, E
2There is a direct relationship between Entity Class and Entity Type when:
They have the same Entity Types
There is no direct relationship
They have the same Entities
They leverage the same reporting
Answer: B
3Which of the following are Policy Lifecycle states included in the ServiceNow baseline? (Choose two.)
Expired
Review
Acknowledged
Published
Verified
Answer: B, D
4Which of the following extends from Content Table? (Choose two.)
Citation
Policy
Control Objective
Authority Document
Answer: A, C
5Which tables extend from the Task table? (Choose two.)
Risk Framework
Risk Response Task
Risk Statement
Risk Event
Risk
Answer: B, D
6What are some of the drivers for customers to get the GRC suite of applications? (Choose four.)
They would like efficiency
They would like integrated reporting
They would like transparency
They would like automated customer service
They would like custom websites
They would like workflow driven processes
Answer: A, B
7The Calculated Risk Score utilizes data from the Inherent and Residual Risk scores to determine an adjusted ALE and Score. What other data drives the adjustments?
Audit Scores
Attestation Score
Configuration Test Score
Control and Indicator Failure Factors
Answer: D
8The advanced planning capability enables integration of Advanced Audit with PPM. If the advanced planning capability is selected when the audit plan is created, what extra related lists display on the engagement record in addition to the related lists displayed with basic planning? (Choose three.)
Time card
Resource plan
Entities
Cost plan
Milestones
Answer: A, B, D
9Which of the following roles can create issues? (Choose three.)
Risk Reader
Compliance Reader
External Auditor
Compliance User
Audit User
Risk Manager
Answer: D, E, F
10What would you use in order to accommodate a customer’s unique process around policy approvals? For example, each policy needs a second layer of approval.
Create a new field and create notifications
Add a new related list to keep track of who has already approved it and who hasn’t approved yet