100% Pass Top-selling CIS-VRM Exams - New 2024 ServiceNow Pratice Exam
CIS-Vendor Risk Management Dumps CIS-VRM Exam for Full Questions - Exam Study Guide
ServiceNow CIS-VRM (Certified Implementation Specialist - Vendor Risk Management) exam is a certification program designed to validate the knowledge and skills of individuals who wish to implement ServiceNow's Vendor Risk Management (VRM) application. In today's digital age, businesses often outsource services to third-party vendors to reduce costs and increase efficiency. However, this also increases the risk of data breaches and security threats. A vendor risk management solution, such as the one offered by ServiceNow, helps organizations identify, assess, and manage these risks.
ServiceNow is a well-known name in the IT industry, providing cloud-based solutions that help businesses manage their IT operations. One of the key areas that ServiceNow focuses on is Vendor Risk Management (VRM), which is the process of assessing and managing the risks associated with third-party vendors. To help professionals gain expertise in this field, ServiceNow offers the Certified Implementation Specialist - Vendor Risk Management (CIS-VRM) certification.
NEW QUESTION # 14
Which statements most accurately describe assignments to vendor contacts? (Choose two.)
- A. A questionnaire can only be completed by assigned vendor contacts
- B. A questionnaire or document request cannot be assigned to multiple vendor contacts
- C. Individual sections in the questionnaire or document request can be assigned
- D. A questionnaire can be read by vendor contacts that are not assigned
Answer: A,C
NEW QUESTION # 15
Which of the following is an objective of Vendor Risk Management? (Choose two.)
- A. To assess and manage the risk from interactions with vendors and third parties
- B. To help negotiate the best possible price for a product or service from the vendor
- C. To verify that vendors have adequate measures and processes in place to ensure profitability of vendor
- D. To help vendors improve their security posture and preparedness
Answer: A,D
NEW QUESTION # 16
All Assessment Metrics within a Metric Category are scored, are rolled up, and get a score of.
- A. 0-10
- B. 0-5
- C. 0-20
- D. 0-100
Answer: A
NEW QUESTION # 17
The assessment page provides an area to import what kind of a completed questionnaire?
- A. SOX
- B. SOC1 & SOC2
- C. SIG
- D. GDPR
Answer: A
NEW QUESTION # 18
A Document Request Template is a record in which table?
- A. Assessment metric category [asmt_metric_category]
- B. Vendor risk assessment [sn_vdr_risk_asmt_assessment]
- C. Document request item [sn_document_template]
- D. Assessment metric type [asmt_metric type]
Answer: C
NEW QUESTION # 19
The Template Designer is leveraged to create which of the following? (Choose two.)
- A. Document Request Template
- B. Questionnaire Template
- C. Vendor Risk Assessment
- D. Assessment Template
Answer: A,B
NEW QUESTION # 20
Vendor Risk Issues are usually created in which stage of an Assessment?
- A. Finalizing with Vendor
- B. Submitted to Vendor
- C. Generating Observations
- D. Responses Received
Answer: B
NEW QUESTION # 21
What third-party vendor security evaluation solutions are commonly integrated with VRM out-of-the-box? (Choose two.)
- A. MyScoreMetrics
- B. Bitsight
- C. Security Scorecard
- D. Vendor Insights
Answer: B,C
NEW QUESTION # 22
What is the no code option to cleaning data being loaded into the Vendor Risk application?
- A. Import
- B. Field Normalization
- C. Fix Scripts
Answer: B
NEW QUESTION # 23
Which statement best describes the SIG Lite?
- A. The SIG Lite assesses basic levels of due diligence and provides a broad but high-level understanding about internal security controls
- B. The SIG Lite is a ServiceNow developed questionnaire
- C. The SIG Lite assesses service providers that store or manage highly sensitive or regulated information
- D. The SIG Lite is a company specific questionnaire
Answer: A
NEW QUESTION # 24
Before any changes to the configuration of an application are made, it is recommended that the correct update set and application scope are selected. What role is required for this functionality?
- A. The User Administrator role is required for this functionality
- B. The System Administrator role is required for this functionality
- C. The Vendor Administrator role is required for this functionality
- D. The Data Administrator role is required for this functionality
Answer: B
NEW QUESTION # 25
What are the baseline mandatory fields when creating a new Vendor Contact? (Choose three.)
- A. Department
- B. Email
- C. Role
- D. Name (First and Last)
- E. Vendor
Answer: B,C,D
NEW QUESTION # 26
What are the features of Vendor Risk Issues? (Choose two.)
- A. Can only be seen by the customer's vendor risk team
- B. Generate audit tasks for the vendor risk team
- C. Provide vendor direct access to update and respond to Issues
- D. Can be generated on-demand or automatically due to an incorrect answer
Answer: C,D
NEW QUESTION # 27
Which could have an impact on the vendor's Risk Assessment rating? (Choose three.)
- A. Leaving answers blank
- B. Spelling errors
- C. Reassigning a questionnaire to a contact
- D. Answering one or more questions incorrectly
- E. Omitting documentation
Answer: C,D,E
NEW QUESTION # 28
When will the tiering value appear on the Vendor record?
- A. When all tiering assessments have been completed
- B. When the Tiering Assessment record state is closed
- C. When the Tiering Assessment record state is Tiering Assessment
Answer: A
NEW QUESTION # 29
Internal roles include: (Choose three.)
- A. Vendor Risk Reviewer sn_vdr_risk_asmt.vendor_assessment_reviewer
- B. Vendor Risk Manager sn_vdr_risk_asmt.vendor_risk_manager
- C. Vendor Risk Assessor sn_vdr_risk_asmt.vendor_assessor
- D. Primary Vendor Contact sn_vdr_risk_asmt.prim_vendor_contact
- E. Vendor Contact sn_vdr_risk.vendor_contact
Answer: A,B,C
NEW QUESTION # 30
A vendor is assessed and responds to a question which impacts one of the Controls applied to them. When is the Control Status updated?
- A. When the Vendor Risk Assessment State is Finalizing with Vendor or Closed
- B. When all Questions in the Vendor Risk Assessment have a response
- C. When the Vendor Risk Assessment response is saved
- D. When the Vendor Risk Assessment State is Responses Received
Answer: A
NEW QUESTION # 31
Which of the following statements are true about the Template Designer? (Choose two.)
- A. Correct answers can be set in the Template Designer
- B. Questions cannot be mandatory in the Template Designer
- C. Questions can be mandatory in the Template Designer
- D. Dependencies between questions cannot be set in the Template Designer
- E. Question weight can be set in the Template Designer
Answer: C,E
NEW QUESTION # 32
The Vendor records are stored in which table?
- A. Task [task]
- B. User [sys_user]
- C. Department [cmn_department]
- D. Company [core_company]
Answer: D
NEW QUESTION # 33
Which statement accurately describes the visibility and audit history of actions and communications in the Vendor Risk Management application?
- A. The vendor and assessor interactions are captured in the Vendor Risk Issue record and are only visible from the portal view
- B. The Vendor Risk Issues created and the activity and history are lost from the Vendor Assessment Portal when the associated vendor contact changes
- C. The vendor and assessor interactions are captured in the Vendor Risk Issue record and are only visible from the platform view
- D. The Vendor Risk Issues created and the activity and history will remain in the Vendor Assessment Portal even when vendor contacts change
Answer: D
NEW QUESTION # 34
......
Authentic Best resources for CIS-VRM Online Practice Exam: https://www.actualtorrent.com/CIS-VRM-questions-answers.html