ServiceNow Certified Implementation Specialist - Third-party Risk Management CIS-TPRM Dumps in PDF

Free ServiceNow CIS-TPRM Real Questions (page: 6)

What other record is created when an element classification is created?

  1. Classification component definition
  2. Classification component criteria
  3. Engagement component definition
  4. Engagement component criteria

Answer(s): B

Explanation:

When an element classification is created in ServiceNow TPRM, a Classification Component Criteria record is also created. This defines the specific criteria or attributes associated with the classification, helping to standardize risk assessments and evaluations.



To what do third parties have direct access?

  1. Update and respond to issues and tasks
  2. View other third party's assessment responses
  3. Modify issue remediation workflow
  4. View other third party's issues and tasks

Answer(s): A

Explanation:

Third parties have direct access to update and respond to issues and tasks assigned to them through the Third-party Portal, enabling them to provide required information and complete assessments without accessing unrelated third-party data.



What are benefits of creating Question Banks? (Choose two.)

  1. An entire category and all its metrics from a question bank can be added to a questionnaire template
  2. The auto assessment generator can randomly select metrics from a question bank to create a questionnaire template
  3. Responses to individual metrics belonging to a question bank will be tracked in the question bank
  4. Individual metrics from a question bank can be added to a questionnaire template

Answer(s): A,D

Explanation:

Question Banks allow organizations to reuse predefined sets of questions efficiently. An entire category and all its metrics can be added to a questionnaire template (A), and individual metrics can also be selectively added to a template (D), enabling flexibility and consistency in assessments.



What statements can be made about the Third-party tier? (Choose two.)

  1. It is leveraged to decide whether to do business with a third-party, or not
  2. It is leveraged to identify the appropriate assessment to send to the third-party
  3. It is required to generate a third-party assessment
  4. It can be manually set or set via the Third-party Tiering process

Answer(s): B,D

Explanation:

The Third-party tier is used to determine the appropriate assessment to send to a third-party and can be either manually set or automatically determined through the Third-party Tiering process, providing a structured approach to risk evaluation.



What application provides the capability to define multiple levels of approvals for an employee with the sn_grc_appr.admin role?

  1. Approval Configurator
  2. Multiple Approver Manager
  3. Multi-level Approval Manager
  4. IRQ ApprovalConfigurator

Answer(s): A

Explanation:

The Approval Configurator application allows users with the sn_grc_appr.admin role to define multiple levels of approvals in ServiceNow, enabling complex approval workflows based on configurable business rules.



What can be said concerning the number of third-party contacts?

  1. A third party must have one designated internal third-party manager
  2. A third party can designate more than one contact as the primary, but must have a minimum of one primary contact
  3. A third party can only designate one contact as the primary contact, but may have multiple non-primary contacts
  4. A third party can only designate one contact as the primary and must have a minimum of one non-primary contact

Answer(s): C

Explanation:

A third party in ServiceNow TPRM can designate only one contact as the primary contact to manage communications and responsibilities, while allowing multiple non-primary contacts to participate in assessments and document submissions.



What are benefits of using the Third-party Portal? (Choose two.)

  1. The Third-party Portal consolidates all communications and artifacts to a single system of truth
  2. Third-party Portal allows the Third-party Risk Assessor team to reassign parts of a Inherent Risk Assessment
  3. The Third-party Portal matches a database of documents to document requests
  4. The Third-party Portal reduces risk for an organization by enabling secure communications with the third- party
  5. The Third-party Portal can be leveraged by the third party to work with other partners

Answer(s): A,D

Explanation:

The Third-party Portal provides a centralized system of truth for all communications and artifacts with third parties and reduces organizational risk by enabling secure and controlled interactions with third parties.



What is the minimum role required to create event-driven rules?

  1. sn_vdr_risk_asmt.vendor_risk_manager
  2. sn_vdr_risk_asmt.vendor_risk_due_dilligence
  3. sn_vdr_risk_asmt.vendor_risk_admin
  4. sn_vdr_risk_asmt.vendor_risk_assessor

Answer(s): C

Explanation:

The sn_vdr_risk_asmt.vendor_risk_admin role is the minimum role required to create event-driven rules in ServiceNow TPRM, as it provides administrative permissions to configure and manage automated risk workflows.



Share your comments for ServiceNow CIS-TPRM exam with other users:

A
Ashok Kumar
1/2/2024 6:53:00 AM

the correct answer to q8 is b. explanation since the mule app has a dependency, it is necessary to include project modules and dependencies to make sure the app will run successfully on the runtime on any other machine. source code of the component that the mule app is dependent of does not need to be included in the exported jar file, because the source code is not being used while executing an app. compiled code is being used instead.

M
Merry
7/30/2023 6:57:00 AM

good questions

V
VoiceofMidnight
12/17/2023 4:07:00 PM

Delayed the exam until December 29th.

U
Umar Ali
8/29/2023 2:59:00 PM

A and D are True

V
vel
8/28/2023 9:17:09 AM

good one with explanation

G
Gurdeep
1/18/2024 4:00:15 PM

This is one of the most useful study guides I have ever used.

AI Tutor 👋 I’m here to help!