ServiceNow CIS-VRM Exam Dumps

Question 6 of 59

What is the definition of ‘Risk Management’?

Policies/Standards/Procedures established to ensure an organization is aligned with corporate strategy and expectations are clearly defined

The process of conforming to standards, policies, and remediation of audit findings

The elimination of vulnerable surface area in an enterprise environment

Process to identify, assess, and respond to risks, threats and vulnerabilities that could compromise the business

Correct Answer: D

Risk Management is the process to identify, assess, and respond to risks, threats, and vulnerabilities that could compromise the business. This definition encapsulates the comprehensive approach required to mitigate potential dangers that might impact organizational operations, ensuring a proactive stance in safeguarding against possible disruptions.

Question 7 of 59

Which of the following is the main benefit of using the Vendor Portal?

Assessments are performed via the Vendor Portal and spreadsheets

More efficiently communicating Assessments with a single contact

Assessments are shared through the Vendor Portal and email

More efficiently completing Assessments via the Vendor Portal

Correct Answer: D

The main benefit of using the Vendor Portal is more efficiently completing Assessments via the Vendor Portal. The other options mention methods and means of communication, but the key benefit highlighted is the efficiency in completing the assessments themselves.

Question 8 of 59

Baseline email notifications that help to automate the vendor risk management process are installed with which plugin?

GRC: Vendor Risk Management

GRC: Audit Management

GRC: Risk Management

GRC: Policy and Compliance Management

Correct Answer: A

The baseline email notifications that help to automate the vendor risk management process are installed with the GRC: Vendor Risk Management plugin. This plugin specifically deals with vendor risk management, making it the correct choice for automating related email notifications.

Question 9 of 59

Which statement best describes the role assignment of vendor contacts in Vendor Risk Management?

When vendor contacts are created, they are automatically assigned the snc_internal role and the snc_external role

When vendor contacts are created, they must be manually assigned the snc_external role

When vendor contacts are created, they are automatically assigned the snc_internal role

When vendor contacts are created, they are automatically assigned the snc_external role

Correct Answer: D

When vendor contacts are created, they are automatically assigned the snc_external role. This ensures that they have the appropriate permissions and access relevant to their external status in Vendor Risk Management.

Question 10 of 59

What can a vendor contact do in the Vendor Portal? (Choose four.)

Update answers to returned questionnaires

Communicate or share information with other vendors of the assessing organization

Create new issues and tasks for the vendor risk assessor team

Review and respond to issues created by the assessing organization

Manage vendor contacts and task assignments within the vendor organization

Respond to assessments sent by the assessing organization

Correct Answer: A, D, E, F

Given the context of a Vendor Portal, the actions that make logical sense for a vendor contact are updating answers to returned questionnaires, reviewing and responding to issues created by the assessing organization, managing vendor contacts and task assignments within the vendor organization, and responding to assessments sent by the assessing organization. These actions are directly related to the tasks a vendor would typically need to perform within a dedicated portal for vendor management.