ServiceNow CIS-RCI Exam - Topic 4 Question 76 Discussion

Actual exam question for ServiceNow's CIS-RCI exam

Question #: 76
Topic #: 4

A control objective has been related to a risk statement and they've been scoped with the same entity type. What can we expect to occur?

ARisks for this risk statement will be moved back into a Review state since there are new factors impacting risk likelihood.

BA control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.

CThe control objective will be marked as compliant since it is mitigating the related risk statement.

DRisk scores will automatically decrease for the risk statement's risks since there are now mitigating controls.

Show Suggested Answer

Suggested Answer: A, E

by Staci at Oct 19, 2024, 09:59 PM

Limited Time Offer

25%

Off

Get Premium CIS-RCI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Corinne

3 months ago

D sounds too optimistic, not all risks will see score drops.

upvoted 0 times

...

Matthew

4 months ago

Totally agree with B, that's how it should work!

upvoted 0 times

...

Freeman

4 months ago

Surprised that A isn't the answer, new factors usually change things.

upvoted 0 times

...

Cassie

4 months ago

I think C is a bit misleading, compliance isn't automatic.

upvoted 0 times

...

Sherron

4 months ago

B seems right, controls should relate to risks.

upvoted 0 times

...

Derick

5 months ago

I recall that when controls are added, it doesn't always mean risks automatically decrease. So, I wonder if option A could be the right choice here.

upvoted 0 times

...

Carin

5 months ago

I feel like this is similar to a practice question we did where controls were linked to risks. I think option C sounds plausible, but I'm not completely confident.

upvoted 0 times

...

Crissy

5 months ago

I'm not entirely sure, but I remember something about how controls can affect risk scores. Could it be option D?

upvoted 0 times

...

Tandra

5 months ago

I think if the control objective and risk statement are scoped together, it might mean that the control can actually help mitigate the risk. So, maybe option B?

upvoted 0 times

...

Jesus

5 months ago

I'm not entirely sure about this one. The options seem a bit tricky, and I don't want to overthink it. I'll just go with my best guess and move on.

upvoted 0 times

...

Donte

5 months ago

Okay, I think I've got this. If a control objective is related to a risk statement with the same entity, then a control should be created to mitigate that risk. I'll go with option B.

upvoted 0 times

...

Lourdes

5 months ago

Hmm, I'm a bit confused by the wording here. I'll need to re-read the question and the answer choices a few times to make sure I understand what's being asked.

upvoted 0 times

...

Arletta

5 months ago

This seems like a straightforward question about the relationship between control objectives and risk statements. I'll need to think through the different options carefully.

upvoted 0 times

...

Hubert

10 months ago

I'm going with Option B. It makes the most sense in terms of the relationship between the control objective and the risk statement.

upvoted 0 times

Yen

9 months ago

User 3: Option B it is then, let's go with that.

upvoted 0 times

...

Rebecka

9 months ago

User 3: Option B it is then, let's go with that.

upvoted 0 times

...

Lashawna

9 months ago

User 2: I agree, it seems like the control objective and risk statement are closely related.

upvoted 0 times

...

Lili

10 months ago

User 2: I agree, it seems like the control objective and risk statement are closely related.

upvoted 0 times

...

Ilda

10 months ago

User 1: I think Option B is the correct choice.

upvoted 0 times

...

Merlyn

10 months ago

User 1: I think Option B is the correct choice.

upvoted 0 times

...

Allene

11 months ago

Haha, Option D sounds like wishful thinking. Risk scores don't just magically decrease because a control has been put in place. That's not how it works in the real world.

upvoted 0 times

...

Margery

11 months ago

I'm not sure about the other options, but I think C is definitely wrong. The control objective being compliant doesn't necessarily mean the related risks have been mitigated.

upvoted 0 times

Beth

9 months ago

True, I agree. Let's go with option B then, it seems to be the most logical choice.

upvoted 0 times

...

Han

9 months ago

I'm not sure about that. Option A seems unlikely though, moving risks back into Review state doesn't make sense.

upvoted 0 times

...

Lezlie

9 months ago

But what about option D? Won't the risk scores decrease with mitigating controls in place?

upvoted 0 times

...

Marge

9 months ago

I think B is the correct option. The control objective and risk statement will be related with a mitigating control.

upvoted 0 times

...

Alysa

11 months ago

Option B seems like the correct answer here. A control related to the control objective should be linked as a mitigating control for the associated risk statement.

upvoted 0 times