ServiceNow Exam CIS-RCI Topic 4 Question 76 Discussion

Actual exam question for ServiceNow's CIS-RCI exam

Question #: 76
Topic #: 4

A control objective has been related to a risk statement and they've been scoped with the same entity type. What can we expect to occur?

ARisks for this risk statement will be moved back into a Review state since there are new factors impacting risk likelihood.

BA control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.

CThe control objective will be marked as compliant since it is mitigating the related risk statement.

DRisk scores will automatically decrease for the risk statement's risks since there are now mitigating controls.

Show Suggested Answer

Suggested Answer: A, E

by Staci at Oct 19, 2024, 09:59 PM

Limited Time Offer

25%

Off

Get Premium CIS-RCI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hubert

3 months ago

I'm going with Option B. It makes the most sense in terms of the relationship between the control objective and the risk statement.

upvoted 0 times

Yen

2 months ago

User 3: Option B it is then, let's go with that.

upvoted 0 times

...

Rebecka

2 months ago

User 3: Option B it is then, let's go with that.

upvoted 0 times

...

Lashawna

2 months ago

User 2: I agree, it seems like the control objective and risk statement are closely related.

upvoted 0 times

...

Lili

3 months ago

User 2: I agree, it seems like the control objective and risk statement are closely related.

upvoted 0 times

...

Ilda

3 months ago

User 1: I think Option B is the correct choice.

upvoted 0 times

...

Merlyn

3 months ago

User 1: I think Option B is the correct choice.

upvoted 0 times

...

Allene

3 months ago

Haha, Option D sounds like wishful thinking. Risk scores don't just magically decrease because a control has been put in place. That's not how it works in the real world.

upvoted 0 times

...

Margery

4 months ago

I'm not sure about the other options, but I think C is definitely wrong. The control objective being compliant doesn't necessarily mean the related risks have been mitigated.

upvoted 0 times

Beth

2 months ago

True, I agree. Let's go with option B then, it seems to be the most logical choice.

upvoted 0 times

...

Han

2 months ago

I'm not sure about that. Option A seems unlikely though, moving risks back into Review state doesn't make sense.

upvoted 0 times

...

Lezlie

2 months ago

But what about option D? Won't the risk scores decrease with mitigating controls in place?

upvoted 0 times

...

Marge

2 months ago

I think B is the correct option. The control objective and risk statement will be related with a mitigating control.

upvoted 0 times

...

Alysa

4 months ago

Option B seems like the correct answer here. A control related to the control objective should be linked as a mitigating control for the associated risk statement.

upvoted 0 times