[Q13-Q36] 2023 Valid CIS-VRM Dumps for Helping Passing ServiceNow Exam! : Free Exams Dumps Materials : http://exams.dumpsmaterials.com

Q13. If clean data is not provided by the customer, what baseline solutions are available within the platform? (Choose three.)

Integration hub ETL plugin

Field normalization plugin

Service graph connector

System definition fix scripts module

System import transform map scripts

Q14. Which statement best describes the SIG Lite?

The SIG Lite is a company specific questionnaire

The SIG Lite is a ServiceNow developed questionnaire

The SIG Lite assesses basic levels of due diligence and provides a broad but high-level understanding about internal security controls

The SIG Lite assesses service providers that store or manage highly sensitive or regulated information

Q15. A Vendor Risk Manager needs to run a report displaying Critical Vendors. On which table would this person run a report?

Company [core_company]

Vendor Risk Issue [sn_var_asmt_issue]

Vendor Contact (vm_vdr_contact]

Vendor Risk Assessment [sn_vdr_risk_asmt_assessment]

Q16. The VRM issue management process is frequently unique to an organization. What two ServiceNow provided building blocks were covered in this course to help with customer needs that might arise during the lifecycle of VRM issues? (Choose two.)

Flow Designer

Service Management

Workflow Editor

Incident Management

Q17. Where can the score for each Assessment Metric or Metric Category be configured?

Assessment Metric Category record

Assessment Template record

Assessment record

Assessment Metric Type record

Q18. Which of the following is an objective of Vendor Risk Management? (Choose two.)

To help vendors improve their security posture and preparedness

To assess and manage the risk from interactions with vendors and third parties

To help negotiate the best possible price for a product or service from the vendor

To verify that vendors have adequate measures and processes in place to ensure profitability of vendor

Q19. What third-party vendor security evaluation solutions are commonly integrated with VRM out-of-the-box? (Choose two.)

MyScoreMetrics

Vendor Insights

Bitsight

Security Scorecard

Q20. Which of the following are functions of the Vendor Risk Assessor? (Choose three.)

Enable communications across vendors

Access completed assessments from vendors

Update vendor contract deadlines

Create issues for the vendor

Create a Primary Contact record for a Vendor

Q21. A Vendor Risk Assessment that consists of a SIG Lite questionnaire and two document requests are displayed as how many total requests in the Vendor Portal?

Q22. In order to evaluate a vendor on a recurring basis, configure a record in this table:

Repeating Surveys

Assessment Metric

Repeating Assessments

Assessment Metric Type

Q23. Which could have an impact on the vendor’s Risk Assessment rating? (Choose three.)

Answering one or more questions incorrectly

Leaving answers blank

Omitting documentation

Spelling errors

Reassigning a questionnaire to a contact

Q24. To what type of assessment record can a vendor contact respond?

Vendor tiering assessment

Vendor risk assessment

Customer assessment

External monitoring assessment

Q25. What is the advantage of using both VRM and GRC/IRM?

Vendor Risk engagements automatically match with Audit engagements

All compliance controls are automatically visible to the vendor risk manage

Primary vendor contacts can then see their overall non compliant risk score

Non compliant controls automatically adjust the risk score for a vendor entity

Q26. What are the features of Vendor Risk Issues? (Choose two.)

Generate audit tasks for the vendor risk team

Can only be seen by the customer’s vendor risk team

Provide vendor direct access to update and respond to Issues

Can be generated on-demand or automatically due to an incorrect answer

Q27. Baseline email notifications that help to automate the vendor risk management process are installed with which plugin?

GRC: Vendor Risk Management

GRC: Audit Management

GRC: Risk Management

GRC: Policy and Compliance Management

Q28. Key data sources for Vendor Risk reporting include which of the following tables? (Choose two.)

Vendor Risk Assessment [sn_vdr_risk_asmt_assessment]

Questionnaire Templates [asmt_metric_type]

Vendor Benchmark Scores [sn_vdr_client_score]

Survey Scores [snc_survey_scores]

Vendor Risk Issue [sn_vdr_risk_asmt_issue]

Q29. The Template Designer contains which of the following elements? (Choose two.)

Option to create an Assessment Template and assign to a vendor

Properties for the supported question data types

Options to weight questions or sections

Design canvas for creating the questions and answers

Q30. All Assessment Metrics within a Metric Category are scored, are rolled up, and get a score of.

0-5

0-100

0-20

0-10

Q31. Roles preceded by sn_vdr_risk are for which scope?

GRC: Vendor Risk Remediation

GRC: Vendor Risk Core

GRC: Risk Management

GRC: Vendor Risk Management

Q32. When an assessor creates an issue or task from the vendor record, it is grouped with other issues or tasks for what ServiceNow entity?

Vendor

All vendors

Remediation plan

Assessment

Q33. Before any changes to the configuration of an application are made, it is recommended that the correct update set and application scope are selected. What role is required for this functionality?

The Vendor Administrator role is required for this functionality

The Data Administrator role is required for this functionality

The User Administrator role is required for this functionality

The System Administrator role is required for this functionality

Q34. What can a vendor contact do in the Vendor Portal? (Choose four.)

Update answers to returned questionnaires

Communicate or share information with other vendors of the assessing organization

Create new issues and tasks for the vendor risk assessor team

Review and respond to issues created by the assessing organization

Manage vendor contacts and task assignments within the vendor organization

Respond to assessments sent by the assessing organization

Q35. For each questionnaire template/assessment metric type, how many vendor risk areas can be designated?

One

As many as desired

None

Two

Q36. When will the tiering value appear on the Vendor record?

When the Tiering Assessment record state is closed

When the Tiering Assessment record state is Tiering Assessment

When all tiering assessments have been completed