ServiceNow CIS-RCI Exam
Certified Implementation Specialist - Risk and Compliance (Page 3 )

Updated On: 19-Jan-2026

In which state is the Policy once all approvals are received?

  1. Review
  2. Published
  3. Draft
  4. Retired
  5. Awaiting Approval

Answer(s): B



Setting up entity classes is required when using which GRC features? (Choose two.)

  1. Setting up an object-based risk assessment
  2. Adding to the policy exception integration registry
  3. Assessing the impact of a regulatory feed
  4. Leveraging classic risk assessments
  5. Leveraging advanced risk assessments

Answer(s): A,E



Which GRC tables serve as primary parent tables for the GRC applications? (Choose three.)

  1. Content
  2. Item
  3. Asset
  4. Task
  5. Document

Answer(s): A,B,E



Annualized Loss Expectancy is a feature of which risk score method?

  1. Residual
  2. Quantitative
  3. Qualitative
  4. Inherent

Answer(s): B



For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)

  1. Controls are identified from library and ad-hoc
  2. Controls are identified from indicator results
  3. Controls are identified from library
  4. Controls are identified ad-hoc
  5. Controls are identified from related issues

Answer(s): A,C,D



Viewing page 3 of 35
Viewing questions 11 - 15 out of 278 questions



Post your Comments and Discuss ServiceNow CIS-RCI exam prep with other Community members:

Join the CIS-RCI Discussion