ServiceNow Exam CIS-RCI Topic 2 Question 40 Discussion

Actual exam question for ServiceNow's CIS-RCI exam

Question #: 40
Topic #: 2

For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls. What are options for control identification? (Choose three.)

AControls are identified from library and ad-hoc

BControls are identified from indicator results

CControls are identified from library

DControls are identified ad-hoc

EControls are identified from related issues

Show Suggested Answer

Suggested Answer: A

by Lisha at Feb 25, 2023, 03:31 AM

Limited Time Offer

25%

Off

Get Premium CIS-RCI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Adela

1 months ago

Alright, let's think this through. A, C, and D cover the bases for control identification. Can't go wrong with that, right? Except maybe the library is dusty and the ad-hoc controls are held together with duct tape.

upvoted 0 times

Minna

19 days ago

C) Controls are identified from library

upvoted 0 times

...

Donte

20 days ago

A) Controls are identified from library and ad-hoc

upvoted 0 times

...

Brock

2 months ago

Haha, this reminds me of that time my boss asked me to identify controls from his crystal ball. Joke's on him, I don't even have one!

upvoted 0 times

Olive

19 hours ago

E) Controls are identified from related issues

upvoted 0 times

...

Juan

2 days ago

B) Controls are identified from indicator results

upvoted 0 times

...

Nobuko

18 days ago

A) Controls are identified from library and ad-hoc

upvoted 0 times

...

Apolonia

2 months ago

Wait, why can't I choose B and E? Shouldn't we also consider controls from indicator results and related issues? This question is tricky.

upvoted 0 times

Genevieve

6 days ago

D) Controls are identified ad-hoc

upvoted 0 times

...

Asuncion

11 days ago

C) Controls are identified from library

upvoted 0 times

...

Dolores

13 days ago

D) Controls are identified ad-hoc

upvoted 0 times

...

Grover

1 months ago

C) Controls are identified from library

upvoted 0 times

...

Georgene

1 months ago

A) Controls are identified from library and ad-hoc

upvoted 0 times

...

Robt

1 months ago

A) Controls are identified from library and ad-hoc

upvoted 0 times

...

Jackie

2 months ago

I believe controls can also be identified from related issues, so option E should be considered as well.

upvoted 0 times

...

Arlette

2 months ago

I think the correct options are A, C, and D. Identifying controls from a library and ad-hoc makes sense for a risk assessment methodology.

upvoted 0 times

Alisha

1 months ago

It's important to have a mix of control identification methods to ensure a comprehensive risk assessment.

upvoted 0 times

...

Veronika

1 months ago

I prefer controls identified from indicator results, they provide more specific information.

upvoted 0 times

...

Magdalene

1 months ago

I think controls identified from related issues can also be helpful in the process.

upvoted 0 times

...

Fletcher

2 months ago

I think controls identified from related issues could also be useful in certain situations.

upvoted 0 times

...

Magdalene

2 months ago

I agree, controls from a library and ad-hoc are important for a risk assessment methodology.

upvoted 0 times

...

Elke

2 months ago

I agree, controls from a library and ad-hoc are important for a risk assessment methodology.

upvoted 0 times

...

Curtis

2 months ago

I agree with Latia, controls can be identified from library, ad-hoc, and indicator results.

upvoted 0 times

...

Latia

2 months ago

I think options A, C, and D are possible for control identification.

upvoted 0 times

...