All of the following are PARENT tables which exist within the GRC Entities application scope EXCEPT.
A. Item
B. Document
C. Content
D. Indicator
Where does a policy get published to when it is approved?
A. Knowledge Summit
B. ServiceNow Library
C. Authoritative Records
D. Knowledge Base
Which role reviews the risk response and moves the Risk record into the Monitor state at the appropriate time?
A. Risk Manager
B. Risk User
C. Risk Reader
D. Risk Owner
What are the four values leveraged for the Inherent and Residual Risk Score Types?
A. Impact, Probability, SLE, ARO
B. Impact, Likelihood, SLE, ALE
C. Impact, Likelihood, SLE, Score
D. Impact, Likelihood, SLE, ARO
There is a direct relationship between Entity Class and Entity Type when:
A. They have the same Entity Types
B. There is no direct relationship
C. They have the same Entities
D. They leverage the same reporting
Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?
A. Audit Management
B. Risk Management
C. Vendor Risk Management
D. Policy and Compliance Management
For Control records, who can modify the Control in the Draft state?
A. All compliance users
B. Only the Compliance Manager
C. Only the person assigned the Attestation
D. Only Control Owners
UCF has a collection of what? Select all UCF terms. (Choose three.)
A. Control Indicators
B. Authority Documents
C. Policies
D. Citations
E. Controls
Which role(s) has the capability to create Policies? (Choose two.)
A. Compliance Manager
B. Compliance admin
C. Compliance User
D. Risk Manager
What are some characteristics of the ServiceNow Store? (Choose four.)
A. Some applications are certified by ServiceNow
B. All applications are certified by ServiceNow
C. Applications may be developed by ServiceNow Technology Partners
D. It houses both paid and free applications and integrations
E. Applications are built om the ServiceNow platform
F. Applications are certified by other developers
