Setting up entity classes is required when using which GRC features? (Choose two.)

• A.Leveraging advanced risk assessments
• B.Leveraging classic risk assessments
• C.Setting up an object-based risk assessment
• D.Assessing the impact of a regulatory feed
• E.Adding to the policy exception integration registry

Comment: *

Name: *

Email: *

Verification: *

Praveen is a Risk Manager. Why would he want to utilize Entity Types and Entities? (Choose three.)

• A.To perform risk assessments
• B.To perform policy exceptions
• C.To remediate vulnerabilities
• D.To perform risk reporting
• E.To monitor risk exposure

Comment: *

Name: *

Email: *

Verification: *

A control objective has been related to a risk statement and they've been scoped with the same entity type. What can we expect to occur?

• A.Risks for this risk statement will be moved back into a Review state since there are new factors impacting risk likelihood.
• B.Risk scores will automatically decrease for the risk statement's risks since there are now mitigating controls.
• C.A control for this control objective, with a matching entity, will be related to the registered risk for this risk statement as a mitigating control.
• D.The control objective will be marked as compliant since it is mitigating the related risk statement.

Comment: *

Name: *

Email: *

Verification: *

What happens to standard control records when the entity is transformed to a reliant entity?

• A.Control remains in it's current state
• B.Control state changes to Canceled
• C.Control is Retired
• D.Control is returned to Draft

Comment: *

Name: *

Email: *

Verification: *

Unified Compliance Framework (UCF) uses a slightly different nomenclature structure than ServiceNow.
Common controls from UCF import into which table in ServiceNow?

• A.Citation [sn_compliance_citation]
• B.Control [sn_compliance_control]
• C.Authority Document [sn_compliance_authority_document]
• D.Control Objective [sn_compliance_policy_statement]

Comment: *

Name: *

Email: *

Verification: *