File Info
| Exam | Certified Implementation Specialist - Vendor Risk Management |
| Number | CIS-VRM |
| File Name | ServiceNow.CIS-VRM.VCEplus.2023-04-27.60q.vcex |
| Size | 31 KB |
| Posted | Apr 27, 2023 |
| Download | ServiceNow.CIS-VRM.VCEplus.2023-04-27.60q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which of the following is an objective of Vendor Risk Management? (Choose two.)
- To help vendors improve their security posture and preparedness
- To assess and manage the risk from interactions with vendors and third parties
- To help negotiate the best possible price for a product or service from the vendor
- To verify that vendors have adequate measures and processes in place to ensure profitability of vendor
Correct answer: AB
Explanation:
Reference: https://reciprocity.com/resources/what-is-a-vendor-risk-managementprogram/#:~:text=A%20vendor%20risk%20management%20framework,across%20the%20organization's%20supplier%20base Reference:
https://reciprocity.com/resources/what-is-a-vendor-risk-managementprogram/#:~:text=A%20vendor%20risk%20management%20framework,across%20the%20organization's%20supplier%20base
Question 2
The Vendor records are stored in which table?
- Company [core_company]
- Department [cmn_department]
- Task [task]
- User [sys_user]
Correct answer: A
Question 3
Internal roles include: (Choose three.)
- Vendor Contact sn_vdr_risk.vendor_contact
- Vendor Risk Manager sn_vdr_risk_asmt.vendor_risk_manager
- Primary Vendor Contact sn_vdr_risk_asmt.prim_vendor_contact
- Vendor Risk Assessor sn_vdr_risk_asmt.vendor_assessor
- Vendor Risk Reviewer sn_vdr_risk_asmt.vendor_assessment_reviewer
Correct answer: BDE
Question 4
Roles preceded by sn_vdr_risk are for which scope?
- GRC: Vendor Risk Remediation
- GRC: Vendor Risk Core
- GRC: Risk Management
- GRC: Vendor Risk Management
Correct answer: D
Question 5
Before any changes to the configuration of an application are made, it is recommended that the correct update set and application scope are selected.
What role is required for this functionality?
- The Vendor Administrator role is required for this functionality
- The Data Administrator role is required for this functionality
- The User Administrator role is required for this functionality
- The System Administrator role is required for this functionality
Correct answer: D
Explanation:
Reference: https://www.bmc.com/blogs/sysadmin-role-responsibilities-salary/ Reference:
https://www.bmc.com/blogs/sysadmin-role-responsibilities-salary/
Question 6
What is the definition of `Risk Management'?
- Policies/Standards/Procedures established to ensure an organization is aligned with corporate strategy and expectations are clearly defined
- The process of conforming to standards, policies, and remediation of audit findings
- The elimination of vulnerable surface area in an enterprise environment
- Process to identify, assess, and respond to risks, threats and vulnerabilities that could compromise the business
Correct answer: D
Explanation:
Reference: https://www.techtarget.com/searchsecurity/definition/What-is-risk-management-andwhy-is-it-important Reference:
https://www.techtarget.com/searchsecurity/definition/What-is-risk-management-andwhy-is-it-important
Question 7
Which of the following is the main benefit of using the Vendor Portal?
- Assessments are performed via the Vendor Portal and spreadsheets
- More efficiently communicating Assessments with a single contact
- Assessments are shared through the Vendor Portal and email
- More efficiently completing Assessments via the Vendor Portal
Correct answer: D
Explanation:
Reference: https://oboloo.com/blog/what-are-the-benefits-of-using-a-vendor-portal-inprocurement/ Reference:
https://oboloo.com/blog/what-are-the-benefits-of-using-a-vendor-portal-inprocurement/
Question 8
Baseline email notifications that help to automate the vendor risk management process are installed with which plugin?
- GRC: Vendor Risk Management
- GRC: Audit Management
- GRC: Risk Management
- GRC: Policy and Compliance Management
Correct answer: D
Question 9
Which statement best describes the role assignment of vendor contacts in Vendor Risk Management?
- When vendor contacts are created, they are automatically assigned the snc_internal role and the snc_external role
- When vendor contacts are created, they must be manually assigned the snc_external role
- When vendor contacts are created, they are automatically assigned the snc_internal role
- When vendor contacts are created, they are automatically assigned the snc_external role
Correct answer: D
Question 10
What can a vendor contact do in the Vendor Portal? (Choose four.)
- Update answers to returned questionnaires
- Communicate or share information with other vendors of the assessing organization
- Create new issues and tasks for the vendor risk assessor team
- Review and respond to issues created by the assessing organization
- Manage vendor contacts and task assignments within the vendor organization
- Respond to assessments sent by the assessing organization
Correct answer: ADEF
