SERVICENOW TPRM EXAM QUESTIONS WITH
CORRECT ANSWERS LATEST UPDATED
What ServiceNow feature helps companies manage third parties without emails
and spreadsheets?
The Third-party Portal
What role is required for a third-party contact to access the third-party portal, an
extension of the customer platform?
snc_external
=
Which fields are included on the Vendor Contact form? (Select two)
Primary Contact and Email
Third-party Risk Issues are considered inactive when they enter this state:
Closed
What actions can occur in the Third-party Portal?
Respond to a Third-party Risk Assessment and Manage Third-party Contacts
Risks registered within an organization are captured as which type of record in
ServiceNow?
Risk Statement
What is a common table used for Third-party Risk Management reporting?
Third-party Risk Assessment [sn_vdr_risk_asmt_assessment]
Third-party Portfolio
Database of third parties and third-party contacts
Third-party IRQ/Tiering Assessment
,An assessment completed by internal assessors to establish a third party's tier
Assessment Management
Assess third parties using assessments of templates, with varying content and
frequency
Issues and Remediation
Identify and assess non-compliancy based on third-party responses and
determine resolution
An extension of the customer platform for portal access?
snc_external
=
What is the third-party risk assessment template equation?
Questionnaire Template + Document Request Template = Assessment Template
=
Which rating can be manually overridden by the organization on the Risk
Scoring tab of the vendor record form?
Third-party Risk Rating
=
The third-party database has been established. What is the next step to
adequately determine the type and frequency of third-party risk assessments for
a given third part?
Conduct an internal third-party tiering assessment
=
The third-party tier is rejected on the third-party record after which of the
following occurs?
The third-party tiering assessment record is set to Closed
=
,In addition to direct third-party assessments, what other scores contribute to the
overall third-party risk rating? Select all that apply.
Assessments on engagements
Assessments on child third parties
=
The third-party risk administrator uses the Template Designer to construct
which assessment components? Select all that apply.
Questionnaire Template
Document Request Template
=
Questionnaire and Document Request Templates?
Assessment Metric Types
=
Sections within the Questionnaire and Document Request Templates?
Metric Categories
=
Individual questions within the Questionnaire and Document Request
Templates?
Assessment Metrics
=
Assessments can be automatically sent to a third party under what
circumstances?
Initial tier assignment
Manual tier change
Security score change
=
What data displayed in the third-party portal for the third party contact? Select
all that apply.
, Issues and tasks at the assessment level
Issues and tasks at the third-party level
Which third-party contacts are assigned to the assessments
=
What can all third-party contacts do in the third-party portal? Select all that
apply.
Read all questionnaires and document requests
Complete questionnaires, document requests, issues, and tasks assigned to them
=
What can primary third-party contacts do in the third-party portal? Select all
that apply.
Assign other contacts to complete assessments
Create a primary and regular third-party contact
Delete a contact
=
After responses are received from the third party, the third-party risk assessor
changes the assessment to which state to trigger issue Generated Rules?
Generating observations
=
Which statement describes the integration between TPRM and GRC?
An assessment metric (question) is associated with a control objective
=
Which type of questionnaire is used internally to determine the vendor
relationship?
Inherent Risk Questionnaire
What type of record is used to document missing or noncompliant third-party
responses and remediation or to accept any non compliance?
Third-party Risk Issues
CORRECT ANSWERS LATEST UPDATED
What ServiceNow feature helps companies manage third parties without emails
and spreadsheets?
The Third-party Portal
What role is required for a third-party contact to access the third-party portal, an
extension of the customer platform?
snc_external
=
Which fields are included on the Vendor Contact form? (Select two)
Primary Contact and Email
Third-party Risk Issues are considered inactive when they enter this state:
Closed
What actions can occur in the Third-party Portal?
Respond to a Third-party Risk Assessment and Manage Third-party Contacts
Risks registered within an organization are captured as which type of record in
ServiceNow?
Risk Statement
What is a common table used for Third-party Risk Management reporting?
Third-party Risk Assessment [sn_vdr_risk_asmt_assessment]
Third-party Portfolio
Database of third parties and third-party contacts
Third-party IRQ/Tiering Assessment
,An assessment completed by internal assessors to establish a third party's tier
Assessment Management
Assess third parties using assessments of templates, with varying content and
frequency
Issues and Remediation
Identify and assess non-compliancy based on third-party responses and
determine resolution
An extension of the customer platform for portal access?
snc_external
=
What is the third-party risk assessment template equation?
Questionnaire Template + Document Request Template = Assessment Template
=
Which rating can be manually overridden by the organization on the Risk
Scoring tab of the vendor record form?
Third-party Risk Rating
=
The third-party database has been established. What is the next step to
adequately determine the type and frequency of third-party risk assessments for
a given third part?
Conduct an internal third-party tiering assessment
=
The third-party tier is rejected on the third-party record after which of the
following occurs?
The third-party tiering assessment record is set to Closed
=
,In addition to direct third-party assessments, what other scores contribute to the
overall third-party risk rating? Select all that apply.
Assessments on engagements
Assessments on child third parties
=
The third-party risk administrator uses the Template Designer to construct
which assessment components? Select all that apply.
Questionnaire Template
Document Request Template
=
Questionnaire and Document Request Templates?
Assessment Metric Types
=
Sections within the Questionnaire and Document Request Templates?
Metric Categories
=
Individual questions within the Questionnaire and Document Request
Templates?
Assessment Metrics
=
Assessments can be automatically sent to a third party under what
circumstances?
Initial tier assignment
Manual tier change
Security score change
=
What data displayed in the third-party portal for the third party contact? Select
all that apply.
, Issues and tasks at the assessment level
Issues and tasks at the third-party level
Which third-party contacts are assigned to the assessments
=
What can all third-party contacts do in the third-party portal? Select all that
apply.
Read all questionnaires and document requests
Complete questionnaires, document requests, issues, and tasks assigned to them
=
What can primary third-party contacts do in the third-party portal? Select all
that apply.
Assign other contacts to complete assessments
Create a primary and regular third-party contact
Delete a contact
=
After responses are received from the third party, the third-party risk assessor
changes the assessment to which state to trigger issue Generated Rules?
Generating observations
=
Which statement describes the integration between TPRM and GRC?
An assessment metric (question) is associated with a control objective
=
Which type of questionnaire is used internally to determine the vendor
relationship?
Inherent Risk Questionnaire
What type of record is used to document missing or noncompliant third-party
responses and remediation or to accept any non compliance?
Third-party Risk Issues
