Updated Jan-2026 Test Engine or PDF for the ServiceNow CIS-RCI test to help you quickly prepare for the ServiceNow exam!
Full CIS-RCI Practice Test and 168 unique questions with explanations waiting just for you, get it now!
NEW QUESTION # 72
Who can move a Policy into Review? (Choose two.)
- A. policy owner
- B. sys admin
- C. policy reviewer
- D. policy approver
Answer: B,D
Explanation:
Reference:
knowledge_18_LAB0296_policy_creation
NEW QUESTION # 73
Risk criteria typically include definitions of different levels of what? (Choose two.)
- A. Importance
- B. Impact
- C. Priority
- D. Criticality
- E. Likelihood
Answer: B,E
NEW QUESTION # 74
What type of GRC record would generate for the departments of Sales, Operations, or IT?
- A. Entitles
- B. Entity objects
- C. Entity types
- D. Entity classes
Answer: A
NEW QUESTION # 75
Entity scoping is used for what?
- A. Create and assign controls to the correct users
- B. Scope out the different users and roles that have access to the platform
- C. Create, assign, and manage controls and risks across an enterprise
- D. Make sure that all of your Entities have the right visibility
Answer: A
Explanation:
Reference: https://docs.servicenow.com/bundle/newyork-governance-risk-compliance/page/product
/grccommon/
task/create-a-profile.html
NEW QUESTION # 76
What is the minimum role needed to maintain entity types?
Choose 2 answers
- A. Risk user
- B. Compliance Manager
- C. Risk Manager
- D. Risk Admin
- E. compliance user
- F. Compliance Admin
Answer: B,C
NEW QUESTION # 77
What table extends from Document Table?
- A. Risk Response Task
- B. Risk Statement
- C. Risk Framework
- D. Risk
Answer: D
NEW QUESTION # 78
Which state is the policy in after being approved by all approvers?
- A. Retired
- B. Published
- C. Draft
- D. Awaiting Approval
- E. Review
Answer: B
NEW QUESTION # 79
Unified Compliance Framework (UCF) uses a slightly different nomenclature structure than ServiceNow. Common controls from UCF import into which table in ServiceNow?
- A. Citation [sn_compliance_citation]
- B. Control [sn_compliance_control]
- C. Control Objective [sn_compliance_policy_statement]
- D. Authority Document [sn_compliance_authority_document]
Answer: D
NEW QUESTION # 80
What is a risk register?
- A. Repository for risk frameworks
- B. Repository for risk criteria
- C. Repository for all unidentified risks
- D. Repository for risk statements
- E. Repository for all identified risks
Answer: E
NEW QUESTION # 81
What table, along with the Policy table, is linked to the Control Objective table by a many-to-many relationship?
- A. Entity Class
- B. Authority Documents
- C. Risk Framework
- D. Citation
Answer: D
Explanation:
Reference:
compliance/reference/r_InstallWPolAndCompl.html
NEW QUESTION # 82
Common controls from UCF import into which table in ServiceNow?
- A. sn_compliance_policy_exception
- B. sn_complilance_authority_document
- C. sn_compliance_policy_statement
- D. sn_compliance_policy
Answer: A
NEW QUESTION # 83
What is the condition that must exist to edit the factor guidance of a published risk assessment methodology (RAM)?
- A. States of the assessment instance records are irrelevant
- B. All assessment instance records are in the Monitor state
- C. All assessment instance records are closed
- D. All assessment instance records are canceled
- E. All assessment instance records are deleted
Answer: E
NEW QUESTION # 84
How does GRC: Policy and Compliance Management track compliance to Authority Documents?
- A. Citations are mapped to entity-scoped controls, which are tested as compliant or non-compliant.
- B. Authority Documents are mapped to individual policies, which are either marked compliant or non-compliant.
- C. Authority Documents are mapped to control objectives and compliance is checked when controls are tested as compliant or non-compliant.
- D. Citations are mapped to control objectives, and compliance is checked when controls are tested as compliant or non-compliant.
Answer: C
NEW QUESTION # 85
Which role reviews the risk response and moves the Risk record into the Monitor state at the appropriate time?
- A. Risk Reader
- B. Risk User
- C. Risk Owner
- D. Risk Manager
Answer: D
Explanation:
Reference:
task/t_CreateRisk.html
NEW QUESTION # 86
The Citation table is a child table of which parent?
- A. Item
- B. Document
- C. Content
- D. Authority Document
Answer: D
Explanation:
Reference: https://community.servicenow.com/community?
id=community_questionsys_id=ad77b570db309bcc2e247a9e0f96192f
NEW QUESTION # 87
What GRC module would you access in order to update Entity Types?
- A. Risk > Entities
- B. CMDB
- C. Scoping > Entity Types
- D. Scoping > Profiles
Answer: C
NEW QUESTION # 88
......
Get Latest CIS-RCI Dumps Exam Questions: https://drive.google.com/open?id=1aIiYppi_rEkty2DjlVpaRIdCbDXY-Ije
Full CIS-RCI Practice Test and 168 unique questions with explanations waiting just for you, get it now: https://www.examslabs.com/ServiceNow/Risk-and-Compliance/best-CIS-RCI-exam-dumps.html