CIS-VRM — Free Practice Questions
10 free sample questions from a bank of 88, with the correct answers and explanations. No signup required — start practising right now.
1Which of the following is an objective of Vendor Risk Management? (Choose two.)
- To help vendors improve their security posture and preparedness
- To assess and manage the risk from interactions with vendors and third parties
- To help negotiate the best possible price for a product or service from the vendor
- To verify that vendors have adequate measures and processes in place to ensure profitability of vendor
Answer:
2What can a vendor contact do in the Vendor Portal? (Choose four.)
- Update answers to returned questionnaires
- Communicate or share information with other vendors of the assessing organization
- Create new issues and tasks for the vendor risk assessor team
- Review and respond to issues created by the assessing organization
- Manage vendor contacts and task assignments within the vendor organization
- Respond to assessments sent by the assessing organization
Answer:
3Which functions can be performed in the Vendor Portal? (Choose three.)
- Assessment response
- Contact Management
- Issue remediation
- Schedule web meetings
- Requests via virtual agent
Answer:
4Where do vendors manage issues, respond to requests, and fulfill tasks assigned to them?
- Spreadsheets
- Vendor Portal
- ServiceNow Platform
- Email
Answer: B
5Which statements most accurately describe assignments to vendor contacts? (Choose two.)
- Individual sections in the questionnaire or document request can be assigned
- A questionnaire or document request cannot be assigned to multiple vendor contacts
- A questionnaire can be read by vendor contacts that are not assigned
- A questionnaire can only be completed by assigned vendor contacts
Answer:
6What are the baseline mandatory fields when creating a new Vendor Contact? (Choose three.)
- Name (First and Last)
- Vendor
- Department
- Email
- Role
Answer:
7Which of these options can be used in data cleansing when importing vendor data? (Choose three.)
- Data Policies
- Access Control Lists
- Field Normalization Rules
- Fix Scripts
- Data Import or Data Source Transform
- UI Policies
Answer:
8Which of the following are functions of the Vendor Risk Assessor? (Choose three.)
- Enable communications across vendors
- Access completed assessments from vendors
- Update vendor contract deadlines
- Create issues for the vendor
- Create a Primary Contact record for a Vendor
Answer:
9What third-party vendor security evaluation solutions are commonly integrated with VRM out-of-the-box? (Choose two.)
- MyScoreMetrics
- Vendor Insights
- Bitsight
- Security Scorecard
Answer:
10What is the no code option to cleaning data being loaded into the Vendor Risk application?
- Fix Scripts
- Field Normalization
- Import
Answer: B
Want the full bank of 88 questions for CIS-VRM? See all practice exams.