[2026年03月08日] 完全版には更新されたのはRisk and Compliance（CIS-RCI）認定サンプル問題
最新のServiceNow CIS-RCIリアル試験問題集PDF
質問 # 18
Which scheduled jobs in the GRC: Profiles scope help manage the population of Entity records? (Choose two.)
- A. GRC Refresh Risk Scores
- B. GRC Profile Generation
- C. GRC indicator nightly run
- D. GRC Entity and Risk Statement Data Collection
正解：A、C
質問 # 19
Control Failure Factor represents the impact of Control Failures on what score?
- A. Total
- B. Calculated
- C. Inherent
- D. Residual
正解：D
質問 # 20
Which of the following are scoped applications related to the Risk and Compliance applications? (Choose four.)
- A. GRC: Policy and Compliance
- B. GRC: Risk Management
- C. GRC: UCF Compliance
- D. GRC: Performance Analytics
- E. GRC: Attestation Design
- F. GRC: GRC Profiles
正解：A、B、D、E
質問 # 21
An audit issue cannot be closed if what related records are still active?
- A. Evidence task
- B. Risk
- C. Activity task
- D. Control
- E. Remediation task
正解：E
質問 # 22
Which GRC application would you use to manage internal or external consultancy processes that aim to prove the effectiveness of controls?
- A. Audit Management
- B. Policy and Compliance Management
- C. Risk Management
- D. Vendor Risk Management
正解：B
質問 # 23
What dependency modeling feature can be used in the Classic UI to build relationships between Entity Classes?
- A. GRC Workbench
- B. Data Model Designer
- C. Dependency Model Builder
- D. GRC Tree Map
正解：D
質問 # 24
What GRC records can leverage Service Level Agreements?
Choose 2 answers
- A. Risk framework
- B. Risk
- C. Risk response cask
- D. Risk issues
- E. Risk statement
正解：C、D
質問 # 25
Which is not a type of key compliance indicator?
- A. Scripted
- B. Reference
- C. Manual
- D. Performance Analytics
- E. Basic
正解：B
質問 # 26
For Control records, who can modify the Control in the Draft state?
- A. Only the person assigned the Attestation
- B. Only the Compliance Manager
- C. All compliance users
- D. Only Control Owners
正解：D
解説：
Reference:
id=community_QUESTIO N NO:&sys_id=f2ee79bcdbd33b8423f4a345ca9619f7&view_source=searchResult
質問 # 27
Setting up entity classes is required when using which GRC features? (Choose two.)
- A. Assessing the impact of a regulatory feed
- B. Leveraging classic risk assessments
- C. Leveraging advanced risk assessments
- D. Adding to the policy exception integration registry
- E. Setting up an object-based risk assessment
正解：C、E
質問 # 28
Why would you create Entity classes?
- A. To show relationships between tables or objects you are tracking that doesn't otherwise exist anywhere in ServiceNow
- B. To be assigned to risk statements, which generate risks for every Entity listed in the Entity Class
- C. To be assigned to Control Objectives, which generate Controls for every Entity listed in the Entity class
- D. To show relationships between Entities and Policies and map them directory to Citations
正解：C
解説：
Reference:
task/t_CreateProfileTypes.html
質問 # 29
Which role(s) has the capability to create Policies? Choose two.)
- A. Risk Manager
- B. Compliance admin
- C. Compliance Manager
- D. Compliance User
正解：B、C
解説：
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc-policy- and-compliance/task/t_DefineAPolicy.html
質問 # 30
In which state can reviewers either send the Policy back to draft or forward it by requesting approval?
- A. Review
- B. Retired
- C. Published
- D. Awaiting Approval
正解：A
質問 # 31
Which of the following are scoped applications related to the Risk and Compliance applications? (Choose four.)
- A. GRC: Policy and Compliance
- B. GRC: Risk Management
- C. GRC: UCF Compliance
- D. GRC: Performance Analytics
- E. GRC: Attestation Design
- F. GRC: GRC Profiles
正解：A、B、D、E
解説：
Reference: https://community.servicenow.com/community?
id=community_blog&sys_id=7d07e198db4b0cdc5ed4a851ca961994
質問 # 32
You are working with your customer to determine necessary audit management workflow configurations.
What
should they know about the approval process for audit engagements? (Choose three.)
- A. If the engagement is approved and there are no remaining open tasks or issues, it automatically moves into the Closed state.
- B. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Fieldwork state.
- C. If the engagement is rejected, it automatically moves into the Scope state.
- D. If the engagement is rejected, it automatically moves back to the Fieldwork state.
- E. If the engagement is approved and there are remaining open tasks or issues, it automatically moves into the Follow Up state.
正解：A、B、D
質問 # 33
The content table (sn_grcs_content) is a parent table of:
- A. sn_grc_profile
- B. sn_risk_framework
- C. sn_risk_risk
- D. sn_risk_definition
正解：A
質問 # 34
Entities can belong 10 more than one of this classification. What is the classification?
- A. Departments
- B. information objects
- C. Entity classes
- D. Entity types
正解：D
質問 # 35
Which roles does ServiceNow advise against assigning directly to a group or user?
Choose 2 answers
- A. sn_grc.reader
- B. sn_grc_bus_user_lite
- C. sn_grc.user
- D. sn_grc.business_user
正解：A、C
質問 # 36
Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)
- A. Risk
- B. Indicator
- C. Content
- D. Document
- E. Policy
正解：A、B、E
質問 # 37
What is a risk register?
- A. Repository for risk criteria
- B. Repository for all identified risks
- C. Repository for risk frameworks
- D. Repository for all unidentified risks
- E. Repository for risk statements
正解：B
質問 # 38
What actions does the GRC Business User Lite role allow a user to take?
Choose 2 answers
- A. Read a policy exception
- B. Group issues
- C. Approve an Advanced Risk assessment
- D. Create a risk assessment
- E. Group control attestations
正解：B、E
質問 # 39
An Entity can belong to one or multiple of which of the following?
- A. Departments
- B. Entity Classes
- C. Information Objects
- D. Entity Types
正解：C
質問 # 40
The Citation table is a child table of which parent?
- A. Item
- B. Content
- C. Document
- D. Authority Document
正解：D
質問 # 41
Which of the following roles can create issues? (Choose three.)
- A. Risk Manager
- B. External Auditor
- C. Risk Reader
- D. Audit User
- E. Compliance User
- F. Compliance Reader
正解：A、D、F
質問 # 42
What are the Risk Scoring methods available in ServiceNow? (Choose two.)
- A. Quantitative
- B. Residual
- C. Calculated
- D. Inherent
- E. Qualitative
正解：A、E
解説：
Reference: https://docs.servicenow.com/bundle/helsinki-governance-risk-compliance/page/product/grc-risk/ reference/r_RiskScoring.html
質問 # 43
......
この試験は、90分以内に完了する必要がある60の複数選択質問で構成されています。試験の合格スコアは70％です。試験料は150ドルで、ServiceNow Testing Centerでオンラインまたは対面で取得できます。
ServiceNow CIS-RCI問題集で一発合格を目指すならこれ！：https://jp.fast2test.com/CIS-RCI-premium-file.html
CIS-RCI練習テスト問題更新されたのは168問があります：https://drive.google.com/open?id=1aBcgNnZJPs397APHUbr37AeFhskwMbfR