CIS-VRM Practice Online

Question 1

Where do vendors manage issues, respond to requests, and fulfill tasks assigned to them?

A : Spreadsheets

B : Vendor Portal

C : ServiceNow Platform

D : Email

Answer: B

Question 2

During the Generating Observations phase of the Vendor Risk Assessment, what action might be taken by the Risk Assessor?

A : Create issues from the assessment if necessary

B : Update the vendor risk score

C : Email the vendor

D : Answer questions the vendor forgot to answer

Answer: A

Question 3

On the Contact record, there is a field for the Vendor name. This is which field (with a label change) from the sys_user table?

A : sn_vendor

B : company_name

C : company

D : vendor_name

Answer: D

Question 4

What are some of the purposes of a Vendor Risk Issue? (Choose two.)

A : Log access-related incidents for the vendor portal

B : Indicate vendors that need further assessment

C : Accept risks identified in the assessment

D : Track remediation of compliance gaps

Answer: B,D

Question 5

Which of the following is an objective of Vendor Risk Management? (Choose two.)

A : To help vendors improve their security posture and preparedness

B : To assess and manage the risk from interactions with vendors and third parties

C : To help negotiate the best possible price for a product or service from the vendor

D : To verify that vendors have adequate measures and processes in place to ensure profitability of vendor

Answer: A,B

Name:	Certified Implementation Specialist - Vendor Risk Management
Exam Code:	CIS-VRM
Certification:	Certified Implementation Specialist
Vendor:	ServiceNow
Total Questions:	60
Last Updated:	May 15, 2024