Updated Oct-2023 Exam Materials for You to Prepare & Pass CIS-VRM Exam [Q19-Q35] : Top Exam Collection : http://blog.topexamcollection.com

NO.19 Baseline email notifications that help to automate the vendor risk management process are installed with which plugin?

GRC: Vendor Risk Management

GRC: Audit Management

GRC: Risk Management

GRC: Policy and Compliance Management

20位 A Vendor Risk Task can be created from which of the following records?

Policy, Assessment, Vendor

Risk, Policy, Assessment

Policy, Vendor Risk issue, Assessment

Vendor Risk Issue, Assessment, Vendor

NO.21 In order to evaluate a vendor on a recurring basis, configure a record in this table:

Repeating Surveys

Assessment Metric

Repeating Assessments

Assessment Metric Type

NO.22 Which GRC records can be related to an Entity? (Choose three.)

Entity Types

Vendors

Risks

Policies

Controls

NO.23 From an Assessment record, the vendor risk assessor can click on “View Responses” to see which of the following?

Issue Responses

Email Responses

Task Responses

Assessment Responses

NO.24 Who is able to change the password for the vendor contact? (Choose two.)

Vendor Contract Relationship Manager

sys_admin

Vendor contact via the Forgot Password link

Vendor Risk Reviewer

25位 All Assessment Metrics within a Metric Category are scored, are rolled up, and get a score of.

0-5

0-100

0-20

0-10

NO.26 What can a vendor contact do in the Vendor Portal? (Choose four.)

Update answers to returned questionnaires

Communicate or share information with other vendors of the assessing organization

Create new issues and tasks for the vendor risk assessor team

Review and respond to issues created by the assessing organization

Manage vendor contacts and task assignments within the vendor organization

Respond to assessments sent by the assessing organization

NO.27 If clean data is not provided by the customer, what baseline solutions are available within the platform? (Choose three.)

Integration hub ETL plugin

Field normalization plugin

Service graph connector

System definition fix scripts module

System import transform map scripts

NO.28 Which of the following is the main benefit of using the Vendor Portal?

Assessments are performed via the Vendor Portal and spreadsheets

More efficiently communicating Assessments with a single contact

Assessments are shared through the Vendor Portal and email

More efficiently completing Assessments via the Vendor Portal

NO.29 What can be used to automatically assign a Vendor tier value?

A Risk Assessment

A configuration setting

A Tiering Assessment

A Vendor Tiering Rule

A Visual Task Board

30位 Key data sources for Vendor Risk reporting include which of the following tables? (Choose two.)

Vendor Risk Assessment [sn_vdr_risk_asmt_assessment]

Questionnaire Templates [asmt_metric_type]

Vendor Benchmark Scores [sn_vdr_client_score]

Survey Scores [snc_survey_scores]

Vendor Risk Issue [sn_vdr_risk_asmt_issue]

NO.31 Which of the following is an objective of Vendor Risk Management? (Choose two.)

To help vendors improve their security posture and preparedness

To assess and manage the risk from interactions with vendors and third parties

To help negotiate the best possible price for a product or service from the vendor

To verify that vendors have adequate measures and processes in place to ensure profitability of vendor

NO.32 The Vendor records are stored in which table?

Company [core_company]

Department [cmn_department]

Task [task]

User [sys_user]

NO.33 Roles preceded by sn_vdr_risk are for which scope?

GRC: Vendor Risk Remediation

GRC: Vendor Risk Core

GRC: Risk Management

GRC: Vendor Risk Management

NO.34 A Vendor Risk Assessment that consists of a SIG Lite questionnaire and two document requests are displayed as how many total requests in the Vendor Portal?

NO.35 On the Contact record, there is a field for the Vendor name. This is which field (with a label change) from the sys_user table?

sn_vendor

company_name

company

vendor_name

CIS-VRM試験[Q19-Q35]の受験準備と合格のための2023年10月最新試験問題集