Amazon
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Okta
Palo Alto Networks
Salesforce
All Vendors
  1. Home
  2. ServiceNow
  3. CIS-TPRM

ServiceNow CIS-TPRM Exam (page: 1)
ServiceNow Certified Implementation Specialist - Third-party Risk Management
Updated on: 12-Jan-2026

Viewing Page 1 of 9
CIS-TPRM PDF 60 Questions

How does ServiceNow help companies manage third parties without emails and spreadsheets?

  1. Third-party Platform
  2. Primary Third-party
  3. Third-party Manager Workspace
  4. Third-party Portal

Answer(s): C

Explanation:

The Third-party Manager Workspace in ServiceNow centralizes third-party risk management activities, allowing companies to manage vendors, assessments, and tasks without relying on emails and spreadsheets. It provides a unified interface for tracking and collaborating on third-party risks.



What is the definition of 'Risk Management'?

  1. Process to identify, assess, and respond to risks, threats and vulnerabilities that could compromise the business
  2. The process of conforming to standards, policies, and remediation of audit findings
  3. The elimination of vulnerable surface area in an enterprise environment
  4. Policies/Standards/Procedures established to ensure an organization is aligned with corporate strategy and expectations are clearly defined

Answer(s): A

Explanation:

Risk management is the process of identifying, assessing, and responding to risks, threats, and vulnerabilities that could negatively impact a business. It focuses on understanding potential risks and implementing strategies to mitigate or manage them effectively.



What application provides the ability to define multiple levels of approvals based on business rule definitions?

  1. Risk Approver Configuration
  2. Approval Configurator
  3. Approver Levels
  4. TPRM Approvals

Answer(s): D

Explanation:

TPRM Approvals in ServiceNow allows organizations to define and manage multiple levels of approvals for third-party risk processes based on configurable business rules, ensuring that risk decisions follow the proper governance workflow.



Which table stores the third-party records?

  1. Company [core_company]
  2. Department [cmn_department]
  3. User [sys_user]
  4. Vendor [sn_vdr_vendor]

Answer(s): D

Explanation:

The Vendor [sn_vdr_vendor] table in ServiceNow stores all third-party (vendor) records, including details such as vendor name, type, and associated risk information, serving as the central repository for third-party management.



When the GRC: Policy and Compliance Management application is installed, what GRC related list displays on the Third-party Risk Issue record?

  1. Policies
  2. Policy Exceptions
  3. Configuration baseline
  4. Citations

Answer(s): A

Explanation:

When the GRC: Policy and Compliance Management application is installed, the Policies related list appears on the Third-party Risk Issue record. This allows linking relevant policies to a third-party risk issue for compliance tracking and management.



What is the advantage of using both TPRM and GRC/IRM?

  1. Non-compliant controls automatically adjust the risk score for a third-party entity
  2. Primary third-party contacts can then see their overall non-compliant risk score
  3. All compliance controls are automatically visible to the third-party risk manager
  4. Third-party Risk engagements automatically match with Audit engagements

Answer(s): A

Explanation:

Integrating TPRM with GRC/IRM enables non-compliant controls to automatically impact the risk score of a third-party entity, providing a dynamic and accurate assessment of vendor risk based on compliance status.



As a final step before closing the Third-party Risk Assessment, what task(s) would the Risk Assessor typically do?

  1. Flag questions for follow up
  2. Review comments and evaluates the risk
  3. Create issues within the assessment
  4. Perform a tiering assessment

Answer(s): B

Explanation:

Before closing a Third-party Risk Assessment, the Risk Assessor typically reviews all comments and evaluates the overall risk. This ensures that the assessment accurately reflects the third party's risk profile and that any necessary actions are identified.



How are Third-party Risk questionnaires and document requests displayed on the Third-party Portal?

  1. As separate requests and can be assigned to different third-party contacts
  2. As a single assessment assigned to a single engagement contact
  3. As separate requests and can only be assigned to the same third-party contact
  4. As a single assessment assigned to a single third-party contact

Answer(s): A

Explanation:

On the Third-party Portal, questionnaires and document requests are displayed as separate requests, allowing them to be assigned to different third-party contacts. This provides flexibility in managing who responds to each specific request.



Viewing Page 1 of 9



Share your comments for ServiceNow CIS-TPRM exam with other users:

Sanjay 8/14/2023 8:07:00 AM

good content
INDIA


Blessious Phiri 8/12/2023 2:19:00 PM

so challenging
Anonymous


PAYAL 10/17/2023 7:14:00 AM

17 should be d ,for morequery its scale out
Anonymous


Karthik 10/12/2023 10:51:00 AM

nice question
Anonymous


Godmode 5/7/2023 10:52:00 AM

yes.
NETHERLANDS


Bhuddhiman 7/30/2023 1:18:00 AM

good mateial
Anonymous


KJ 11/17/2023 3:50:00 PM

good practice exam
Anonymous


sowm 10/29/2023 2:44:00 PM

impressivre qustion
Anonymous


CW 7/6/2023 7:06:00 PM

questions seem helpful
Anonymous


luke 9/26/2023 10:52:00 AM

good content
Anonymous


zazza 6/16/2023 9:08:00 AM

question 21 answer is alerts
ITALY


Abwoch Peter 7/4/2023 3:08:00 AM

am preparing for exam
Anonymous


mohamed 9/12/2023 5:26:00 AM

good one thanks
EGYPT


Mfc 10/23/2023 3:35:00 PM

only got thru 5 questions, need more to evaluate
Anonymous


Whizzle 7/24/2023 6:19:00 AM

q26 should be b
Anonymous


sarra 1/17/2024 3:44:00 AM

the aaa triad in information security is authentication, accounting and authorisation so the answer should be d 1, 3 and 5.
UNITED KINGDOM


DBS 5/14/2023 12:56:00 PM

need to attend this
UNITED STATES


Da_costa 8/1/2023 5:28:00 PM

these are free brain dumps i understand, how can one get free pdf
Anonymous


vikas 10/28/2023 6:57:00 AM

provide access
EUROPEAN UNION


Abdullah 9/29/2023 2:06:00 AM

good morning
Anonymous


Raj 6/26/2023 3:12:00 PM

please upload the ncp-mci 6.5 dumps, really need to practice this one. thanks guys
Anonymous


Miguel 10/5/2023 12:21:00 PM

question 16: https://help.salesforce.com/s/articleview?id=sf.care_console_overview.htm&type=5
SPAIN


Hiren Ladva 7/8/2023 10:34:00 PM

yes i m prepared exam
Anonymous


oliverjames 10/24/2023 5:37:00 AM

my experience was great with this site as i studied for the ms-900 from here and got 900/1000 on the test. my main focus was on the tutorials which were provided and practice questions. thanks!
GERMANY


Bhuddhiman 7/20/2023 11:52:00 AM

great course
UNITED STATES


Anuj 1/14/2024 4:07:00 PM

very good question
Anonymous


Saravana Kumar TS 12/8/2023 9:49:00 AM

question: 93 which statement is true regarding the result? sales contain 6 columns and values contain 7 columns so c is not right answer.
INDIA


Lue 3/30/2023 11:43:00 PM

highly recommend just passed my exam.
CANADA


DC 1/7/2024 10:17:00 AM

great practice! thanks
UNITED STATES


Anonymus 11/9/2023 5:41:00 AM

anyone who wrote this exam recently?
SOUTH AFRICA


Khalid Javid 11/17/2023 3:46:00 PM

kindly share the dump
Anonymous


Na 8/9/2023 8:39:00 AM

could you please upload cfe fraud prevention and deterrence questions? it will be very much helpful.
Anonymous


shime 10/23/2023 10:03:00 AM

this is really very very helpful for mcd level 1
ETHIOPIA


Vnu 6/3/2023 2:39:00 AM

very helpful!
Anonymous