CIS-RC Exam QuestionsBrowse all questions from this exam

CIS-RC Exam - Question 92


The Entity Type table has a many-to-many relationship with which tables? (Choose two.)

Show Answer
Correct Answer: CD

The Entity Type table has a many-to-many relationship with Control and Risk tables. In systems like ServiceNow's GRC (Governance, Risk, and Compliance), Entity Types often categorize various entities which can have numerous Controls applied to them and be associated with multiple Risks. This is why the many-to-many relationship holds true for these tables.

Discussion

6 comments
Sign in to comment
esllinOptions: AB
Jan 18, 2023

Control and Risk has m2m relationship.

Checwes
Dec 22, 2023

I think you meant to select CD

sephereth
Sep 14, 2024

i don't think so if u go to the sys_db_object table in the PDI, filter by Label contains "entity type" AND Name contains "m2m" AND Application contains "GRC" you will get a list of following m2m relationship tables, note that controls and Risk are not in them - Control Objective to Entity Type[sn_compliance_m2m_statement_profile_type] - Content to Entity Type[sn_grc_m2m_content_profile_type] - Content Reference to Entity Type[sn_grc_m2m_cont_ref_profile_type] - Document to Entity Type[sn_grc_m2m_document_profile_type] - Item to entity type[sn_grc_m2m_item_entity_type] - Entity to Entity Type[sn_grc_m2m_profile_profile_type] - Entity type to Metric Definition[sn_grc_metric_m2m_definition_profile_type] - Risk Framework to Entity Type[sn_risk_m2m_framework_profile_type] - Entity Type to Risk Statement[sn_risk_m2m_risk_definition_profile_type]

sephereth
Sep 14, 2024

i don't think so if u go to the sys_db_object table in the PDI, filter by Label contains "entity type" AND Name contains "m2m" AND Application contains "GRC" you will get a list of following m2m relationship tables, note that controls and Risk are not in them - Control Objective to Entity Type[sn_compliance_m2m_statement_profile_type] - Content to Entity Type[sn_grc_m2m_content_profile_type] - Content Reference to Entity Type[sn_grc_m2m_cont_ref_profile_type] - Document to Entity Type[sn_grc_m2m_document_profile_type] - Item to entity type[sn_grc_m2m_item_entity_type] - Entity to Entity Type[sn_grc_m2m_profile_profile_type] - Entity type to Metric Definition[sn_grc_metric_m2m_definition_profile_type] - Risk Framework to Entity Type[sn_risk_m2m_framework_profile_type] - Entity Type to Risk Statement[sn_risk_m2m_risk_definition_profile_type]

kilkotOptions: CD
Nov 15, 2023

Controls and Risks often maintain a many-to-many relationship with the Entity Type table in ServiceNow's GRC framework, whereas the relationship with Risk Statements and Policies might exist but is not usually established as a direct many-to-many connection with Entity Types.

ssaurabhpanedy
Jul 4, 2024

AB is the correct ans as Risk statement can be linked with multiple entity type.

IronHider
Sep 13, 2024

AC is correct

PurushothamanDOptions: AB
Feb 25, 2025

Entity Type to Risk Statement [sn_risk_m2m_risk_definition_profile_type] Policy to Entity Type [sn_compliance_m2m_policy_profile_type] Check for components installed with Risk, Policy and Compliance.

sepherethOptions: AB
Sep 14, 2024

Answer: A. Risk Statement B. Policy Explanation: list of m2m tables related to Entity Type - Control Objective to Entity Type[sn_compliance_m2m_statement_profile_type] - Content to Entity Type[sn_grc_m2m_content_profile_type] - Content Reference to Entity Type[sn_grc_m2m_cont_ref_profile_type] - Document to Entity Type[sn_grc_m2m_document_profile_type] - Item to entity type[sn_grc_m2m_item_entity_type] - Entity to Entity Type[sn_grc_m2m_profile_profile_type] - Entity type to Metric Definition[sn_grc_metric_m2m_definition_profile_type] - Risk Framework to Entity Type[sn_risk_m2m_framework_profile_type] - Entity Type to Risk Statement[sn_risk_m2m_risk_definition_profile_type] Source: PDI, sys_db_object list view, with filter: nameLIKEm2m^sys_scope.nameLIKEGRC^labelLIKEentity type