ServiceNow CIS-VRM - Certified Implementation Specialist - Vendor Risk Management Exam
Page: 2 / 12
Total 60 questions
Question #6 (Topic: Exam A)
What is the definition of ‘Risk Management’?
A. Policies/Standards/Procedures established to ensure an organization is aligned with corporate strategy and expectations are clearly defined
B. The process of conforming to standards, policies, and remediation of audit findings
C. The elimination of vulnerable surface area in an enterprise environment
D. Process to identify, assess, and respond to risks, threats and vulnerabilities that could compromise the business
Answer: D
Question #7 (Topic: Exam A)
Which of the following is the main benefit of using the Vendor Portal?
A. Assessments are performed via the Vendor Portal and spreadsheets
B. More efficiently communicating Assessments with a single contact
C. Assessments are shared through the Vendor Portal and email
D. More efficiently completing Assessments via the Vendor Portal
Answer: D
Question #8 (Topic: Exam A)
Baseline email notifications that help to automate the vendor risk management process are installed with which plugin?
A. GRC: Vendor Risk Management
B. GRC: Audit Management
C. GRC: Risk Management
D. GRC: Policy and Compliance Management
Answer: D
Question #9 (Topic: Exam A)
Which statement best describes the role assignment of vendor contacts in Vendor Risk Management?
A. When vendor contacts are created, they are automatically assigned the snc_internal role and the snc_external role
B. When vendor contacts are created, they must be manually assigned the snc_external role
C. When vendor contacts are created, they are automatically assigned the snc_internal role
D. When vendor contacts are created, they are automatically assigned the snc_external role
Answer: D
Question #10 (Topic: Exam A)
What can a vendor contact do in the Vendor Portal? (Choose four.)
A. Update answers to returned questionnaires
B. Communicate or share information with other vendors of the assessing organization
C. Create new issues and tasks for the vendor risk assessor team
D. Review and respond to issues created by the assessing organization
E. Manage vendor contacts and task assignments within the vendor organization
F. Respond to assessments sent by the assessing organization
Answer: ADEF
