Grc Cert 3: Blueprint/Study Guide

GRC CERT 3: BLUEPRINT/STUDY GUIDE
Which of the following are scoped applications in GRC? (Select all that apply)

A. GRC: Profiles B. GRC: Risk Management C. GRC: Compliance and Audit
Management D. Global - ANSWERAnswer: A & B

Who should be on the core implementation team for a GRC implementation? (Select all
that apply) A. Risk and compliance experts B. ServiceNow developer team C. External
audit team D. Risk assessors - ANSWERAnswer: A & B

The Entity Filter record requires which mandatory field to be completed?
A. Filter date
B. Filter name
C. Conditions
D. Source table - ANSWERAnswer: D

Which of the following are tables in the GRC: Policy and Compliance scope? (Select all
that apply) A. Issue B. Control C. Risk D. Citation - ANSWERAnswer: B & D
Entity table - ANSWERsn_grc_profile

Entity Scoping - ANSWERflexible, pattern-based approach

allows customers to be consistent when setting up risks and controls

they generate entities, which get a risk and/or control assigned to them

Which of the following are tables in the Risk scope? (Select all that apply) A. Issue B.
Risk Framework C. Risk Statement D. Citation - ANSWERAnswer: B & C

Unified Compliance Framework (UCF) Control documents import into which
ServiceNow table with the UCF integration? A. Citation table B. Control Objectives table
C. Authority Documents table D. Policy table - ANSWERAnswer: B

Which roles are inherited when a user is given the sn_audit.user role? (Select all that
apply) A. sn_grc.reader B. sn_compliance.reader C. sn_risk.reader D.
sn_audit.external_auditor - ANSWERAnswer: A, B, & C

Entity Class table - ANSWERsn_grc_profile_class

Entity Type table - ANSWERsn_grc_profile_type