IRM ServiceNow Exam Questions and
Answers51
Which tables store the links from the Entity Types to Policies and Entity Types to Control
Objectives? (Choose two.)
A. [sn_compliance_m2m_policy_profile]
B. [sn_compliance_m2m_policy_profile_type]
C. [sn_compliance_m2m_statement_profile_type]
D. [sn_risk_m2m_risk_profile] - ANSWERS-B. [sn_compliance_m2m_policy_profile_type]
C. [sn_compliance_m2m_statement_profile_type]
By default, who is assigned to complete control attestations in the baseline?
A. Audit Owner
B. Risk Owner
C. Control Owner
D. Entity Owner
E. Compliance Manager - ANSWERS-C. Control Owner
What table is populated if a regulatory change is determined to be applicable?
A. Regulatory feed table
B. Action task table
C. Regulatory alert table
D. Regulatory change task table - ANSWERS-D. Regulatory change task table
What can reviewers do when Policy records are in the Review state? (Choose two.)
,A. Relate Entity Types to the Policy
B. Retire the Policy
C. Send the Policy back to Draft
D. Edit the policy - ANSWERS-C. Send the Policy back to Draft
D. Edit the policy
Control Objectives are not active until the parent policy is in which of the following states?
A. Awaiting Approval
B. Draft
C. Published
D. Review - ANSWERS-C. Published
Which of the following are the classic risk score types that ServiceNow tracks? (Choose three.)
A. Residual
B. Inherent
C. Calculated
D. Operational
E. Digital
Reveal Solution - ANSWERS-A. Residual
B. Inherent
C. Calculated
Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)
A. Document
B. Policy
C. Risk
,D. Content
E. Indicator - ANSWERS-A. Document
D. Content
E. Indicator
What are some characteristics of the ServiceNow Store? (Choose four.)
A. Some applications are certified by ServiceNow
B. All applications are certified by ServiceNow
C. Applications may be developed by ServiceNow Technology Partners
D. It houses both paid and free applications and integrations
E. Applications are built om the ServiceNow platform
F. Applications are certified by other developers - ANSWERS-B. All applications are certified by
ServiceNow
C. Applications may be developed by ServiceNow Technology Partners
D. It houses both paid and free applications and integrations
E. Applications are built om the ServiceNow platform
Which role is not part of ServiceNow GRC?
A. Risk User
B. Risk Developer
C. Risk Manager
D. Risk Reader - ANSWERS-B. Risk Developer
Which of the following statements is true of a Risk Response task?
A. Only one Risk Response task can be related to a Risk at a time
B. Only users with the risk_manager role or higher can be assigned to a Risk Response task
, C. The risk admin role is required to assign the Risk Response task
D. The Risk Response task is automatically progressed through the states using a workflow -
ANSWERS-D. The Risk Response task is automatically progressed through the states using a
workflow
What table, along with the Policy table, is linked to the Control Objective table by a many-to-
many relationship?
A. Entity Class
B. Citation
C. Authority Documents
D. Risk Framework - ANSWERS-B. Citation
Why would you create Entity classes?
A. To show relationships between tables or objects you are tracking that doesn't otherwise exist
anywhere in ServiceNow
B. To be assigned to risk statements, which generate risks for every Entity listed in the Entity
Class
C. To be assigned to Control Objectives, which generate Controls for every Entity listed in the
Entity class
D. To show relationships between Entities and Policies and map them directory to Citations -
ANSWERS-A. To show relationships between tables or objects you are tracking that doesn't
otherwise exist anywhere in ServiceNow
The Tablename.config:
A. Displays the configuration list view of the table in the browser tab
B. Displays the table in list view within the Content Frame
C. Displays the table in list view within a separate browser tab
D. Displays the configuration list view of the table in the Content Frame - ANSWERS-D. Displays
the configuration list view of the table in the Content Frame
Answers51
Which tables store the links from the Entity Types to Policies and Entity Types to Control
Objectives? (Choose two.)
A. [sn_compliance_m2m_policy_profile]
B. [sn_compliance_m2m_policy_profile_type]
C. [sn_compliance_m2m_statement_profile_type]
D. [sn_risk_m2m_risk_profile] - ANSWERS-B. [sn_compliance_m2m_policy_profile_type]
C. [sn_compliance_m2m_statement_profile_type]
By default, who is assigned to complete control attestations in the baseline?
A. Audit Owner
B. Risk Owner
C. Control Owner
D. Entity Owner
E. Compliance Manager - ANSWERS-C. Control Owner
What table is populated if a regulatory change is determined to be applicable?
A. Regulatory feed table
B. Action task table
C. Regulatory alert table
D. Regulatory change task table - ANSWERS-D. Regulatory change task table
What can reviewers do when Policy records are in the Review state? (Choose two.)
,A. Relate Entity Types to the Policy
B. Retire the Policy
C. Send the Policy back to Draft
D. Edit the policy - ANSWERS-C. Send the Policy back to Draft
D. Edit the policy
Control Objectives are not active until the parent policy is in which of the following states?
A. Awaiting Approval
B. Draft
C. Published
D. Review - ANSWERS-C. Published
Which of the following are the classic risk score types that ServiceNow tracks? (Choose three.)
A. Residual
B. Inherent
C. Calculated
D. Operational
E. Digital
Reveal Solution - ANSWERS-A. Residual
B. Inherent
C. Calculated
Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)
A. Document
B. Policy
C. Risk
,D. Content
E. Indicator - ANSWERS-A. Document
D. Content
E. Indicator
What are some characteristics of the ServiceNow Store? (Choose four.)
A. Some applications are certified by ServiceNow
B. All applications are certified by ServiceNow
C. Applications may be developed by ServiceNow Technology Partners
D. It houses both paid and free applications and integrations
E. Applications are built om the ServiceNow platform
F. Applications are certified by other developers - ANSWERS-B. All applications are certified by
ServiceNow
C. Applications may be developed by ServiceNow Technology Partners
D. It houses both paid and free applications and integrations
E. Applications are built om the ServiceNow platform
Which role is not part of ServiceNow GRC?
A. Risk User
B. Risk Developer
C. Risk Manager
D. Risk Reader - ANSWERS-B. Risk Developer
Which of the following statements is true of a Risk Response task?
A. Only one Risk Response task can be related to a Risk at a time
B. Only users with the risk_manager role or higher can be assigned to a Risk Response task
, C. The risk admin role is required to assign the Risk Response task
D. The Risk Response task is automatically progressed through the states using a workflow -
ANSWERS-D. The Risk Response task is automatically progressed through the states using a
workflow
What table, along with the Policy table, is linked to the Control Objective table by a many-to-
many relationship?
A. Entity Class
B. Citation
C. Authority Documents
D. Risk Framework - ANSWERS-B. Citation
Why would you create Entity classes?
A. To show relationships between tables or objects you are tracking that doesn't otherwise exist
anywhere in ServiceNow
B. To be assigned to risk statements, which generate risks for every Entity listed in the Entity
Class
C. To be assigned to Control Objectives, which generate Controls for every Entity listed in the
Entity class
D. To show relationships between Entities and Policies and map them directory to Citations -
ANSWERS-A. To show relationships between tables or objects you are tracking that doesn't
otherwise exist anywhere in ServiceNow
The Tablename.config:
A. Displays the configuration list view of the table in the browser tab
B. Displays the table in list view within the Content Frame
C. Displays the table in list view within a separate browser tab
D. Displays the configuration list view of the table in the Content Frame - ANSWERS-D. Displays
the configuration list view of the table in the Content Frame
