GRC CERT 3: BLUEPRINT/STUDY GUIDE
Which of the following are scoped applications in GRC? (Select all that apply)
A. GRC: Profiles B. GRC: Risk Management C. GRC: Compliance and Audit
Management D. Global - ANSWERAnswer: A & B
Who should be on the core implementation team for a GRC implementation? (Select all
that apply) A. Risk and compliance experts B. ServiceNow developer team C. External
audit team D. Risk assessors - ANSWERAnswer: A & B
The Entity Filter record requires which mandatory field to be completed?
A. Filter date
B. Filter name
C. Conditions
D. Source table - ANSWERAnswer: D
Which of the following are tables in the GRC: Policy and Compliance scope? (Select all
that apply) A. Issue B. Control C. Risk D. Citation - ANSWERAnswer: B & D
Entity table - ANSWERsn_grc_profile
Entity Scoping - ANSWERflexible, pattern-based approach
allows customers to be consistent when setting up risks and controls
they generate entities, which get a risk and/or control assigned to them
Which of the following are tables in the Risk scope? (Select all that apply) A. Issue B.
Risk Framework C. Risk Statement D. Citation - ANSWERAnswer: B & C
Unified Compliance Framework (UCF) Control documents import into which
ServiceNow table with the UCF integration? A. Citation table B. Control Objectives table
C. Authority Documents table D. Policy table - ANSWERAnswer: B
Which roles are inherited when a user is given the sn_audit.user role? (Select all that
apply) A. sn_grc.reader B. sn_compliance.reader C. sn_risk.reader D.
sn_audit.external_auditor - ANSWERAnswer: A, B, & C
Entity Class table - ANSWERsn_grc_profile_class
Entity Type table - ANSWERsn_grc_profile_type
Which of the following are scoped applications in GRC? (Select all that apply)
A. GRC: Profiles B. GRC: Risk Management C. GRC: Compliance and Audit
Management D. Global - ANSWERAnswer: A & B
Who should be on the core implementation team for a GRC implementation? (Select all
that apply) A. Risk and compliance experts B. ServiceNow developer team C. External
audit team D. Risk assessors - ANSWERAnswer: A & B
The Entity Filter record requires which mandatory field to be completed?
A. Filter date
B. Filter name
C. Conditions
D. Source table - ANSWERAnswer: D
Which of the following are tables in the GRC: Policy and Compliance scope? (Select all
that apply) A. Issue B. Control C. Risk D. Citation - ANSWERAnswer: B & D
Entity table - ANSWERsn_grc_profile
Entity Scoping - ANSWERflexible, pattern-based approach
allows customers to be consistent when setting up risks and controls
they generate entities, which get a risk and/or control assigned to them
Which of the following are tables in the Risk scope? (Select all that apply) A. Issue B.
Risk Framework C. Risk Statement D. Citation - ANSWERAnswer: B & C
Unified Compliance Framework (UCF) Control documents import into which
ServiceNow table with the UCF integration? A. Citation table B. Control Objectives table
C. Authority Documents table D. Policy table - ANSWERAnswer: B
Which roles are inherited when a user is given the sn_audit.user role? (Select all that
apply) A. sn_grc.reader B. sn_compliance.reader C. sn_risk.reader D.
sn_audit.external_auditor - ANSWERAnswer: A, B, & C
Entity Class table - ANSWERsn_grc_profile_class
Entity Type table - ANSWERsn_grc_profile_type
