Your customer needs to conduct monthly Operational Effectiveness assessments for controls across two organizations (North America and EMEA). Your customer requires that assessment results for North America be accessible only to users in North America and likewise for EME A.
Additionally, the Chief Risk Officer reviews the assessment results by Business Process every week.
How should you design perspectives to achieve this?

• A.Use the Region hierarchy initially, and later use both Region and Business Process hierarchies for security.
• B.Use the Business Process hierarchy for security and the Region hierarchy for reporting of controls.
• C.Use both Region and Business Process hierarchies solely for reporting purposes.
• D.Use the Region hierarchy for security and the Business Process hierarchy for reporting of controls.

Comment: *

Name: *

Email: *

Verification: *

During an assessment, an issue was created. Your job as the Issue Manager is to review the issues and validate them. If it is determined that they are not valid issues, you need to close them. You have found an issue that is not valid and with Status: Open and State: Reported.
Identify the correct step to close this issue.

• A.After you have completed the remediation plan, click the Close button on the Remediation Plan page.
• B.On the Manage Issues page, highlight the issue and click the Close button.
• C.Ensure that the issue status is In Edit, and then from the Actions menu, select Close Issue.
• D.The assessment associated to the issue must be completed before closing the issue. Only then can you close the issue.

Comment: *

Name: *

Email: *

Verification: *

What would happen to an access incident in Advanced Access Controls (AAC) that has been remediated and has a status of "Closed," but poses a conflict again during a subsequent evaluation of controls?

• A.The incident is copied and a new incident is created based on the original incident.
• B.The incident is deferred.
• C.The incident remains in "Closed" status and assigned users receive a notification that additional access incidents have been identified.
• D.The incident remains in "Closed" status and additional remedial action cannot be taken.
• E.The incident status changes to "Assigned."

Comment: *

Name: *

Email: *

Verification: *

You want to identify Controls with the most Incidents, with the condition that the identified Controls should have 80% of all Incidents. To do this, you have imported a custom object that contains the number of incidents associated with each control, and have added that object to a transaction model.
Which pattern filter must you now apply?

• A.Mean
• B.Absolute Deviation
• C.Anomaly Detection
• D.Pareto
• E.Clustering

Comment: *

Name: *

Email: *

Verification: *

You have two segregation of duties requirements:
1) a user can access either the supplier creation pages or the invoice pages, but not both.
2) a user can access either the invoice creation pages or the payment creation pages, but not both.
How must these requirements be met in Advanced Access Controls?

• A.Construct one entitlement: "Create Supplier & Create Invoice & Create Payment"
• B.Construct one model with three condition filters where the Function Name Equals "Create Supplier", "Create Invoice" and "Create Payment"
• C.Construct two models, and create controls based on the models: "Create Supplier & Create Invoice", "Create Invoice & Create Payment"
• D.Construct one model: "Create Supplier & Create Invoice & Create Payment"
• E.Construct three controls, and create controls based on the models: "Create Supplier & Create Invoice", "Create Invoice & Create Payment", "Create Supplier & Create Payment"

Comment: *

Name: *

Email: *

Verification: *