Font size
WorksheetsGRC IRMI - Final Day Prep
Total questions: 20
Worksheet time: 11mins
Who can move a control to Monitor state? (select two)
A. Compliance Manager
B. Risk Manager
C. Compliance User
D. Compliance Admin
What tables are extended using the document table in GRC, select 3.
Citation
Authority Document
Risk
Risk Framework
Policy
What is the state of an Automatically created risk response task?
A. Work In Progress
B. Draft
C. Closed
D. Cancelled
Manual factors are used to build out an advanced risk assessment. Which options do you have when associating manual factors? Select 3 answers.
A. Can be associated with a residual assessment
B. Can be associated with avendor risk assessment
C. Can be associated with a control effectiveness assessment
D. Can be associated with a policy exception request
E. Can be associated with a inherent assessment
What method is used to create Dependency model for Entity Classes in GRC?
A. Entity tiers
B. CI Class manager
C. CSDM
D. GRC Workbench
What is the relationship table that relates Risks to controls?
sn_risk_m2m_risk_control
sn_compliance_risk_control
sn_compliance_m2m_risk_control
sn_grc_m2m_risk_control
What can a risk manager do to a risk in Assess state? Select 2
A. Retire a risk
B. Delete the risk
C. Move it back to draft
What happens when a record has been marked as confidential? Select 2
A. Users in the ‘not allowed’ users list are blocked from access to the record.
B. Owners manager is auto-assigned read access
C. The user who enabled the confidential options is auto-appended to the ‘Allowed users’ list
D Users in the ‘allowed users’ list have access to the record
Identify the Policy Record Lifecycle.
A. Draft >> Review >> Published
B. Draft >> Review >> Approval >> Published
C. Draft >> Review >> Awaiting Approval >> Published >> Retired
D. Draft >> Review >> Contributors >> Published
What choices for calculating scoring logic are available on both qualitative and quantitative when either is chosen as the Assessment contribution for an inherent assessment?
A. Sum, Minimum, Maximum, Weighted Average, Product, Script
B. Sum, Minimum, Maximum, Average, Product, Script
C. Sum, Minimum, Maximum, Weighted Average, Product
Which Risk-related tables have a state workflow? (select 2 that apply)
A. Risk Statement
B. Risk Framework
C. Risk Response
D. Registered Risk
When converting to common controls, you can add reliant entities in the batches of _____.
A. 100
B. 15
C. 55
D. All in one go (there is no limit)
What’s the new relationship that can be created between Risk statements using GRC Advanced Risk?
A. Parent-Child relationship between risk statements and risk events
B. A relationship between risk statements and audit engagements
C. Parent-Child relationship between risk statements
This new control type was introduced in Feb 2023, store release.
A. Standard
B. Unique
C. Common
D. Consolidated
What features are provided by GRC Advanced Risk application? select 2
A. Risk hierarchy and scoring
B. create independent entities
C. Manage risk events
D. create entities outside of existing tables
You can only delete a factor if it does not have any RAM (Risk Assessment Methodology) associated with the factor.
True
False
Which table does not have a state lifecycle?
A. Control
B. Policy
C. Control Objective
D. Policy Exception
What all is true for a Policy exception? Select 3
A. Policy Exception record has a lifecycle
B. There are two flows associated with Policy Exception
C. Approval process flow has trigger based on the substate field
D. Approval process flow triggers when the state changes to awaiting approval
E. Verification process flow is triggered based on a schedule
What do you type in the filter navigator to open default view of the risk records in the content frame?
A. sn_risk.list
B. sn_risk_risk.list
C. sn_risk_risk.form
D. sn_risk.form
Which content pack provides a large number of prebuilt indicator templates?
A. Indicator Template Pack
B. Technology Controls
C. Cyber Controls
D. Security Controls
