Certified Implementation Specialist - Risk and Compliance (CIS-RC) is a specialist-level ServiceNow certification exam. The blueprint splits the exam across 5 domains, starting with Security Operations, Incident Response, Vulnerability Management. On exam day you face around 212 questions in 90 minutes, in formats such as multiple choice. The 20 questions below are free samples written to match that style: answer each one first, then reveal the correct answer and note which topics you miss. The CIS-RC is rated medium in difficulty, and most candidates prepare with at least 12 months of hands-on experience. Because every answer is revealed in place, you can work through the whole set without leaving this page. Work through all 20 samples before deciding whether to buy the full 212+ question PDF.
Looking for more? Click here to get the full PDF with 212+ practice questions for $10 for offline study and deeper preparation.
What actions can be executed by a user with the GRC Business User role? (Choose two.)
Which GRC tables serve as primary parent tables for the GRC applications? (Choose three.)
What can assessors do when a risk is in the state of Assess on a classic risk assessment? (Choose two.)
The Risk Scoring values are entered on the Risk Statement. What records inherits the values from the Risk Statement?
Which ServiceNow roles can manually move a Control record into the Monitor state? (Choose two.)
Possible regulations when Entity scoping for Healthcare: (Choose two.)
Control indicators may be triggered or scheduled in which state?
On which records is the entity a required field? (Choose two.)
In which state can reviewers either send the Policy back to draft or forward it by requesting approval?
Which of the following statements is true of a Risk Response task?
Control Objectives are not active until the parent policy is in which of the following states?
Which Script include can be modified to change how the compliance scores roll up?
Which of the following tables are within the GRC: Policy and Compliance Management application scope? (Choose two.)
Control Failure Factor represents the impact of Control Failures on what score?
The overall goal of Entity Classes is to:
The Single Loss Expectancy is $1.000.000 and the Annual Rate of Occurrence is 20%. What is the Annualized Loss Expectancy?
Risk criteria typically include definitions of different levels of what? (Choose two.)
What are key prerequisites for a control test task to be generated?
How can you get the SOX content pack?
What would you leverage in order to provide users with an alternate user experience to view policies, create policy exceptions, and search for controls?
No. They are original practice questions written to match the format and topic mix of the Certified Implementation Specialist - Risk and Compliance exam, which contains around 212 questions. Treat them as representative practice, not leaked exam content.
This page includes 20 questions, each with its correct answer you can reveal in place. The full study PDF expands that to 212+ questions.
Yes. Open the answer panel under each question to see which option is correct. Answer first, then reveal, so the set works as a self-check rather than a reading exercise.
Not on its own. Use the samples to find weak topics, revise them against the official domains, then work through the full 212+ question set under timed conditions before booking the exam.
Download the complete CIS-RC study bundle with 212+ questions in a single printable PDF.
Start typing to search exams
Access practice tests for AWS, Microsoft, Cisco and more.