Free CIS-TPRM Exam Braindumps
Certified Implementation Specialist - Third-party Risk Management Questions 21–25 (page: 6)

Updated On: 10-Feb-2026

A Third-party Risk Manager needs to run a report displaying Third-party Assessments due. On which table would this report be run?

  1. [sn_vdr_risk_assessment]
  2. [sn_vdr_risk_asmt_task]
  3. [sn_vdr_risk_asmt_assessment]
  4. [sn_vdr_risk_asmt_issue]

Answer(s): C

Explanation:

Reports on Third-party Assessments due are run on the [sn_vdr_risk_asmt_assessment] table, which stores all third-party risk assessments, their status, due dates, and related metadata necessary for tracking assessment completion.



As a primary contact, a new third-party contact can be added via 'Manage Team' and then selecting what?

  1. Invite Contact
  2. Request Contact
  3. New Contact
  4. Add Contact

Answer(s): A

Explanation:

A primary third-party contact can add a new third-party contact by navigating to Manage Team and selecting Invite Contact, which sends an invitation to the new contact to participate in assessments and tasks.



What functions can be performed in the Third-party Portal? (Choose two.)

  1. Manage assessment deadlines
  2. Complete assessments
  3. General project management
  4. Host web meetings

Answer(s): A,B

Explanation:

In the Third-party Portal, users can manage assessment deadlines and complete assessments, allowing third parties to respond to questionnaires and submit required information within specified timelines.



When will the tiering value be updated on the third-party record?

  1. When the inherent risk assessment record state is Responses Received
  2. When all inherent risk assessments have been completed
  3. When the inherent risk assessment record state is closed
  4. When all inherent risk assessments have been sent

Answer(s): C

Explanation:

The tiering value on a third-party record is updated when the inherent risk assessment record state is closed, ensuring that the final assessment results are considered before assigning or updating the third-party tier.



What does accepting an Issue mark?

  1. An implication that the known control failure is unimportant
  2. An intention to create an exception for a known control failure or risk
  3. Attempted remediation failed
  4. Special third parties get an exception

Answer(s): B

Explanation:

Accepting an Issue indicates the organization's intention to create an exception for a known control failure or risk, formally acknowledging the risk without immediate remediation while documenting the decision within ServiceNow TPRM.



Viewing page 6 of 13
Viewing questions 26 - 30 out of 60 questions


Post your Comments and Discuss ServiceNow CIS-TPRM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!