Discuss ServiceNow CIS-RCI Exam Topic 3 Question 62

How does GRC: Policy and Compliance Management track compliance to Authority Documents?

ACitations are mapped to entity-scoped controls, which are tested as compliant or non-compliant.

BAuthority Documents are mapped to individual policies, which are either marked compliant or non-compliant.

CAuthority Documents are mapped to control objectives and compliance is checked when controls are tested as compliant or non-compliant.

DCitations are mapped to control objectives, and compliance is checked when controls are tested as compliant or non-compliant.

Suggested Answer: C

Get Premium CIS-RCI Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

16 comments · newest first

Dulce 11 months ago

C makes the most sense to me!

Winfred 11 months ago

I thought it was A, but now I'm not so sure.

Tyisha 11 months ago

Wait, are we sure about D? Seems off.

Layla 12 months ago

Definitely B, that's how we do it!

Marge 12 months ago

I think it's option C, sounds right!

Veronica 1 year ago

I have a vague memory that compliance tracking is about testing controls, but I can't remember if it's citations or Authority Documents that are mapped.

Lashonda 1 year ago

I practiced a question similar to this, and I feel like citations are involved, but I can't recall if they relate to controls or policies.

Sharen 1 year ago

I think it might be option C because it mentions control objectives, which seems to fit with how compliance is usually checked.

Pamella 1 year ago

I remember something about mapping Authority Documents to controls, but I'm not sure if it's about entity-scoped controls or control objectives.

Nguyet 1 year ago

This is a good question to test our understanding of GRC compliance management. I feel pretty confident I can work through the options and identify the correct approach used by GRC tools.

Luisa 1 year ago

Okay, I think I've got a handle on this. The key is understanding the relationship between Authority Documents, controls, and compliance testing. I'll make sure to analyze each answer choice closely.

Sue 1 year ago

Hmm, I'm a bit unsure about this one. The question is asking about a specific GRC process, and I'm not super familiar with the details of how GRC tools work. I'll have to think this through carefully.

Luke 1 year ago

This looks like a straightforward question about how GRC tracks compliance to Authority Documents. I'll need to carefully read through the answer choices to understand the different approaches.

Ronald 1 year ago

Hmm, this looks like a straightforward calculation based on the confusion matrix. I'll need to carefully read through the values and formulas to make sure I get the sensitivity right.

Kristal 1 year ago

I'm pretty confident the answer is E, primaryPreferred. The question specifically says we want to read from the primary under normal circumstances, but allow reads from secondaries when the primary is unavailable. That's exactly what primaryPreferred does.

Johnna 1 year ago

I've got this one! The hexadecimal code FF0000 means the maximum value for red (FF), and the minimum values for green (00) and blue (00), so the color will be red.

ServiceNow CIS-RCI Exam - Topic 3 Question 62 Discussion