ServiceNow Exam CIS-RCI Topic 4 Question 76 Discussion

Actual exam question for ServiceNow's CIS-RCI exam

Question #: 76
Topic #: 4

A control objective has been related to a risk statement and they've been scoped with the same entity type. What can we expect to occur?

ARisks for this risk statement will be moved back into a Review state since there are new factors impacting risk likelihood.

BA control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.

CThe control objective will be marked as compliant since it is mitigating the related risk statement.

DRisk scores will automatically decrease for the risk statement's risks since there are now mitigating controls.

Show Suggested Answer

Suggested Answer: A, E

by Staci at Oct 19, 2024, 09:59 PM

Limited Time Offer

25%

Off

Get Premium CIS-RCI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hubert

1 months ago

I'm going with Option B. It makes the most sense in terms of the relationship between the control objective and the risk statement.

upvoted 0 times

Lili

7 days ago

User 2: I agree, it seems like the control objective and risk statement are closely related.

upvoted 0 times

...

Ilda

18 days ago

User 1: I think Option B is the correct choice.

upvoted 0 times

...

Merlyn

19 days ago

User 1: I think Option B is the correct choice.

upvoted 0 times

...

Allene

1 months ago

Haha, Option D sounds like wishful thinking. Risk scores don't just magically decrease because a control has been put in place. That's not how it works in the real world.

upvoted 0 times

...

Margery

1 months ago

I'm not sure about the other options, but I think C is definitely wrong. The control objective being compliant doesn't necessarily mean the related risks have been mitigated.

upvoted 0 times

Lezlie

But what about option D? Won't the risk scores decrease with mitigating controls in place?

upvoted 0 times

...

Marge

2 days ago

I think B is the correct option. The control objective and risk statement will be related with a mitigating control.

upvoted 0 times

...

Alysa

2 months ago

Option B seems like the correct answer here. A control related to the control objective should be linked as a mitigating control for the associated risk statement.

upvoted 0 times