ServiceNow cis-vrm practice test

Which could have an impact on the vendors Risk Assessment rating? (Choose three.)

• A. Answering one or more questions incorrectly
• B. Leaving answers blank
• C. Omitting documentation
• D. Spelling errors
• E. Reassigning a questionnaire to a contact

The assessment page provides an area to import what kind of a completed questionnaire?

• A. GDPR
• B. SOC1 & SOC2
• C. SIG
• D. SOX

Which of the following statements are true about the Template Designer? (Choose two.)

• A. Question weight can be set in the Template Designer
• B. Correct answers can be set in the Template Designer
• C. Questions can be mandatory in the Template Designer
• D. Dependencies between questions cannot be set in the Template Designer
• E. Questions cannot be mandatory in the Template Designer

The VRM issue management process is frequently unique to an organization. What two ServiceNow provided building blocks were covered in this course to help with customer needs that might arise during the lifecycle of VRM issues? (Choose two.)

• A. Flow Designer
• B. Service Management
• C. Workflow Editor
• D. Incident Management

A Vendor Risk Task can be created from which of the following records?

• A. Policy, Assessment, Vendor
• B. Risk, Policy, Assessment
• C. Policy, Vendor Risk issue, Assessment
• D. Vendor Risk Issue, Assessment, Vendor

To what type of assessment record can a vendor contact respond?

• A. Vendor tiering assessment
• B. Vendor risk assessment
• C. Customer assessment
• D. External monitoring assessment

Which of these options can be used in data cleansing when importing vendor data? (Choose three.)

• A. Data Policies
• B. Access Control Lists
• C. Field Normalization Rules
• D. Fix Scripts
• E. Data Import or Data Source Transform
• F. UI Policies

Which statement best describes the SIG Lite?

• A. The SIG Lite is a company specific questionnaire
• B. The SIG Lite is a ServiceNow developed questionnaire
• C. The SIG Lite assesses basic levels of due diligence and provides a broad but high-level understanding about internal security controls
• D. The SIG Lite assesses service providers that store or manage highly sensitive or regulated information

Which of the following is the main benefit of using the Vendor Portal?

• A. Assessments are performed via the Vendor Portal and spreadsheets
• B. More efficiently communicating Assessments with a single contact
• C. Assessments are shared through the Vendor Portal and email
• D. More efficiently completing Assessments via the Vendor Portal

What is the minimum role required to create a new Vendor Risk Issue?

• A. Vendor Risk Assessor [sn_vdr_risk_asmt.vendor_assessor]
• B. Vendor Assessment Reviewer [sn_vdr_risk_asmt.vendor_assessment_reviewer]
• C. Vendor Risk Manager [sn_vdr_risk_asmt.vendor_risk_manager]
• D. System Administrator [admin]