ExamsReviews CIS-VRM Exam Questions | Real CIS-VRM Practice Dumps
Verified CIS-VRM Exam Dumps Q&As - Provide CIS-VRM with Correct Answers
NEW QUESTION # 31
From an Assessment record, the vendor risk assessor can click on "View Responses" to see which of the following?
- A. Issue Responses
- B. Task Responses
- C. Assessment Responses
- D. Email Responses
Answer: C
NEW QUESTION # 32
How are Vendor Risk questionnaires and document requests displayed on the Vendor Portal?
- A. As a single assessment assigned to a single engagement contact
- B. As separate requests and can only be assigned to the same vendor contact
- C. As separate requests and can be assigned to different vendor contacts
- D. As a single assessment assigned to a single vendor contact
Answer: D
NEW QUESTION # 33
When will the tiering value appear on the Vendor record?
- A. When the Tiering Assessment record state is closed
- B. When all tiering assessments have been completed
- C. When the Tiering Assessment record state is Tiering Assessment
Answer: B
NEW QUESTION # 34
What are some of the purposes of a Vendor Risk Issue? (Choose two.)
- A. Track remediation of compliance gaps
- B. Accept risks identified in the assessment
- C. Log access-related incidents for the vendor portal
- D. Indicate vendors that need further assessment
Answer: A,D
NEW QUESTION # 35
What are the baseline mandatory fields when creating a new Vendor Contact? (Choose three.)
- A. Vendor
- B. Name (First and Last)
- C. Email
- D. Role
- E. Department
Answer: B,C,D
NEW QUESTION # 36
What is the minimum role required to create a new Vendor Risk Issue?
- A. Vendor Risk Manager [sn_vdr_risk_asmt.vendor_risk_manager]
- B. Vendor Assessment Reviewer [sn_vdr_risk_asmt.vendor_assessment_reviewer]
- C. Vendor Risk Assessor [sn_vdr_risk_asmt.vendor_assessor]
- D. System Administrator [admin]
Answer: D
NEW QUESTION # 37
Which statement best describes the role assignment of vendor contacts in Vendor Risk Management?
- A. When vendor contacts are created, they must be manually assigned the snc_external role
- B. When vendor contacts are created, they are automatically assigned the snc_internal role
- C. When vendor contacts are created, they are automatically assigned the snc_external role
- D. When vendor contacts are created, they are automatically assigned the snc_internal role and the snc_external role
Answer: C
NEW QUESTION # 38
In the Paris release and beyond, the scoped vendor portal (svdp) will be installed by default but can be overridden in which System Property record to use the legacy/traditional vendor portal (vdp)?
- A. sn_vdr_risk_asmt.scoped.vendor_portal_endpoint
- B. sn_vdr_risk_asmt.vendor_portal_endpoint
- C. sn_vdr_risk_asmt.vendor_portal
- D. sn_vdr_risk_asmt.scoped.vendor_portal
Answer: B
NEW QUESTION # 39
If clean data is not provided by the customer, what baseline solutions are available within the platform? (Choose three.)
- A. System import transform map scripts
- B. Field normalization plugin
- C. Integration hub ETL plugin
- D. Service graph connector
- E. System definition fix scripts module
Answer: B,C,E
NEW QUESTION # 40
Which statement best describes the SIG Lite?
- A. The SIG Lite assesses service providers that store or manage highly sensitive or regulated information
- B. The SIG Lite assesses basic levels of due diligence and provides a broad but high-level understanding about internal security controls
- C. The SIG Lite is a company specific questionnaire
- D. The SIG Lite is a ServiceNow developed questionnaire
Answer: B
NEW QUESTION # 41
In order to evaluate a vendor on a recurring basis, configure a record in this table:
- A. Assessment Metric Type
- B. Repeating Surveys
- C. Repeating Assessments
- D. Assessment Metric
Answer: C
NEW QUESTION # 42
What is the advantage of using both VRM and GRC/IRM?
- A. Vendor Risk engagements automatically match with Audit engagements
- B. Non compliant controls automatically adjust the risk score for a vendor entity
- C. All compliance controls are automatically visible to the vendor risk manage
- D. Primary vendor contacts can then see their overall non compliant risk score
Answer: D
NEW QUESTION # 43
Which of the following statements are true about the Template Designer? (Choose two.)
- A. Question weight can be set in the Template Designer
- B. Questions cannot be mandatory in the Template Designer
- C. Dependencies between questions cannot be set in the Template Designer
- D. Questions can be mandatory in the Template Designer
- E. Correct answers can be set in the Template Designer
Answer: A,D
NEW QUESTION # 44
Internal roles include: (Choose three.)
- A. Primary Vendor Contact sn_vdr_risk_asmt.prim_vendor_contact
- B. Vendor Risk Manager sn_vdr_risk_asmt.vendor_risk_manager
- C. Vendor Risk Reviewer sn_vdr_risk_asmt.vendor_assessment_reviewer
- D. Vendor Risk Assessor sn_vdr_risk_asmt.vendor_assessor
- E. Vendor Contact sn_vdr_risk.vendor_contact
Answer: B,C,D
NEW QUESTION # 45
What can a vendor contact do in the Vendor Portal? (Choose four.)
- A. Create new issues and tasks for the vendor risk assessor team
- B. Update answers to returned questionnaires
- C. Respond to assessments sent by the assessing organization
- D. Communicate or share information with other vendors of the assessing organization
- E. Review and respond to issues created by the assessing organization
- F. Manage vendor contacts and task assignments within the vendor organization
Answer: B,C,E,F
NEW QUESTION # 46
Which of the following is an objective of Vendor Risk Management? (Choose two.)
- A. To help negotiate the best possible price for a product or service from the vendor
- B. To assess and manage the risk from interactions with vendors and third parties
- C. To verify that vendors have adequate measures and processes in place to ensure profitability of vendor
- D. To help vendors improve their security posture and preparedness
Answer: B,D
NEW QUESTION # 47
The Template Designer is leveraged to create which of the following? (Choose two.)
- A. Questionnaire Template
- B. Vendor Risk Assessment
- C. Assessment Template
- D. Document Request Template
Answer: A,D
NEW QUESTION # 48
On which of the following tables can you create vendor risk reports? (Choose three.)
- A. Vendor Risk Issue [sn_vdr_risk_asmt_issue]
- B. Vendor Risk Assessment [sn_vdr_risk_asmt_assessment]
- C. Vendor Activity [vm_vendor_activity]
- D. Company [core_company]
- E. Vendor Contact [vm_vendor_contact]
Answer: A,B,C
NEW QUESTION # 49
In addition to the "Design canvas", which elements does the Template Designer contain? (Choose three.)
- A. FAQ Page and Tour option
- B. Risk criteria to identity conditions and risk areas
- C. Header bar which contains tabs that display different view and a menu of various functions
- D. Controls for the supported question data types
- E. Question and Categories tabs that contain question/categories that were added to the Question Bank
Answer: C,D,E
NEW QUESTION # 50
Where do vendors manage issues, respond to requests, and fulfill tasks assigned to them?
- A. Email
- B. Vendor Portal
- C. ServiceNow Platform
- D. Spreadsheets
Answer: B
NEW QUESTION # 51
Which of the following are functions of the Vendor Risk Assessor? (Choose three.)
- A. Create issues for the vendor
- B. Update vendor contract deadlines
- C. Access completed assessments from vendors
- D. Enable communications across vendors
- E. Create a Primary Contact record for a Vendor
Answer: A,C,E
NEW QUESTION # 52
Before any changes to the configuration of an application are made, it is recommended that the correct update set and application scope are selected. What role is required for this functionality?
- A. The User Administrator role is required for this functionality
- B. The Vendor Administrator role is required for this functionality
- C. The System Administrator role is required for this functionality
- D. The Data Administrator role is required for this functionality
Answer: C
NEW QUESTION # 53
Which statements most accurately describe assignments to vendor contacts? (Choose two.)
- A. A questionnaire or document request cannot be assigned to multiple vendor contacts
- B. A questionnaire can only be completed by assigned vendor contacts
- C. A questionnaire can be read by vendor contacts that are not assigned
- D. Individual sections in the questionnaire or document request can be assigned
Answer: B,D
NEW QUESTION # 54
To what type of assessment record can a vendor contact respond?
- A. Customer assessment
- B. External monitoring assessment
- C. Vendor risk assessment
- D. Vendor tiering assessment
Answer: C
NEW QUESTION # 55
......
The CIS-VRM exam is designed for individuals who are responsible for managing vendor risks in their organizations. This includes risk managers, compliance officers, vendor managers, procurement professionals, and IT security professionals. CIS-VRM exam measures the candidates' knowledge of various aspects of vendor risk management, including vendor risk assessment, risk mitigation strategies, vendor performance monitoring, and regulatory compliance. Certified Implementation Specialist - Vendor Risk Management certification exam is a comprehensive test that covers various aspects of vendor risk management, and candidates must pass the exam to earn the CIS-VRM certification.
Get Top-Rated ServiceNow CIS-VRM Exam Dumps Now: https://www.examsreviews.com/CIS-VRM-pass4sure-exam-review.html
Pass Your CIS-VRM Dumps Free Latest ServiceNow Practice Tests: https://drive.google.com/open?id=16YHh2F4mfriEcoZcjD7CIkY_09BgjR25