CIS-RCI 無料問題集「ServiceNow Certified Implementation Specialist - Risk and Compliance」

（A）Authority Documents are mapped to individual policies, which are either marked compliant or non-compliant.

（B）Citations are mapped to entity-scoped controls, which are tested as compliant or non-compliant.

（C）Authority Documents are mapped to control objectives and compliance is checked when controls are tested as compliant or non-compliant.

（D）Citations are mapped to control objectives, and compliance is checked when controls are tested as compliant or non-compliant.

（A）Content

（B）Risk

（C）Document

（D）Policy

（E）Indicator

（A）Policies

（B）Citations

（C）Authority Documents

（D）Controls

（E）Control Indicators

（A）sn_risk.admin

（B）sn_risk.manager

（C）sn_grc.business_user

（D）sn_risk.user

（A）Risk without considering mitigation actions

（B）Noncompliant controls applied to a risk

（C）Risk that remains after mitigation actions

（D）Compliant controls applied to a risk

（A）GRC Entity Generation

（B）GRC Profile Generation

（C）GRC item Generation

（D）GRC Cleanup

（A）Visualization options

（B）Tracking options

（C）User Criteria

（D）Alert Lies

（E）Supporting data fields

（F）sample size

（A）Entity Upstream/Downstream relationships

（B）Advanced risk assessments

（C）Classic risk assessments

（D）Object-based risk assessments

（E）Policy exceptions

（A）ServiceNow identifies the control and does not create a duplicate

（B）ServiceNow will delete the manually created control

（C）ServiceNow creates a duplicate control and notifies the control owner

（D）ServiceNow creates a duplicate control without notifying the control owner

（A）Control and Indicator Failure Factors

（B）Attestation Score

（C）Configuration Test Score

（D）Audit Scores