CIS-VRM practice test

1. Question 1 · 1

   Which of the following is an objective of Vendor Risk Management? (Choose two.)

   Choose all answers that apply.

   • To help vendors improve their security posture and preparedness
   • To assess and manage the risk from interactions with vendors and third parties
   • To help negotiate the best possible price for a product or service from the vendor
   • To verify that vendors have adequate measures and processes in place to ensure profitability of vendor

2. Question 2 · 1

   What can a vendor contact do in the Vendor Portal? (Choose four.)

   Choose all answers that apply.

   • Update answers to returned questionnaires
   • Communicate or share information with other vendors of the assessing organization
   • Create new issues and tasks for the vendor risk assessor team
   • Review and respond to issues created by the assessing organization
   • Manage vendor contacts and task assignments within the vendor organization
   • Respond to assessments sent by the assessing organization

3. Question 3 · 1

   Where do vendors manage issues, respond to requests, and fulfill tasks assigned to them?

   Choose one answer.

   • Spreadsheets
   • Vendor Portal
   • ServiceNow Platform
   • Email

4. Question 4 · 1

   What are the baseline mandatory fields when creating a new Vendor Contact? (Choose three.)

   Choose all answers that apply.

   • Name (First and Last)
   • Vendor
   • Department
   • Email
   • Role

5. Question 5 · 1

   Which of these options can be used in data cleansing when importing vendor data? (Choose three.)

   Choose all answers that apply.

   • Data Policies
   • Access Control Lists
   • Field Normalization Rules
   • Fix Scripts
   • Data Import or Data Source Transform
   • UI Policies

6. Question 6 · 1

   Which of the following are functions of the Vendor Risk Assessor? (Choose three.)

   Choose all answers that apply.

   • Enable communications across vendors
   • Access completed assessments from vendors
   • Update vendor contract deadlines
   • Create issues for the vendor
   • Create a Primary Contact record for a Vendor

7. Question 7 · 1

   What third-party vendor security evaluation solutions are commonly integrated with VRM out-of-the-box? (Choose two.)

   Choose all answers that apply.

   • MyScoreMetrics
   • Vendor Insights
   • Bitsight
   • Security Scorecard

8. Question 8 · 1

   What is the no code option to cleaning data being loaded into the Vendor Risk application?

   Choose one answer.

   • Fix Scripts
   • Field Normalization
   • Import

9. Question 9 · 1

   When will the tiering value appear on the Vendor record?

   Choose one answer.

   • When the Tiering Assessment record state is closed
   • When the Tiering Assessment record state is Tiering Assessment
   • When all tiering assessments have been completed

10. Question 10 · 1

    The Vendor records are stored in which table?

    Choose one answer.

    • Company [core_company]
    • Department [cmn_department]
    • Task [task]
    • User [sys_user]

11. Question 11 · 1

    If clean data is not provided by the customer, what baseline solutions are available within the platform? (Choose three.)

    Choose all answers that apply.

    • Integration hub ETL plugin
    • Field normalization plugin
    • Service graph connector
    • System definition fix scripts module
    • System import transform map scripts

12. Question 12 · 1

    On the Contact record, there is a field for the Vendor name. This is which field (with a label change) from the sys_user table?

    Choose one answer.

    • sn_vendor
    • company_name
    • company
    • vendor_name

13. Question 13 · 1

    The Template Designer is leveraged to create which of the following? (Choose two.)

    Choose all answers that apply.

    • Document Request Template
    • Assessment Template
    • Vendor Risk Assessment
    • Questionnaire Template

14. Question 14 · 1

    All Assessment Metrics within a Metric Category are scored, are rolled up, and get a score of.

    Choose one answer.

    • 0-5
    • 0-100
    • 0-20
    • 0-10

15. Question 15 · 1

    The Template Designer contains which of the following elements? (Choose two.)

    Choose all answers that apply.

    • Option to create an Assessment Template and assign to a vendor
    • Properties for the supported question data types
    • Options to weight questions or sections
    • Design canvas for creating the questions and answers

Paid access to all 45 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.