Certified Implementation Specialist - Risk and Compliance Questions and Answers

200 questions organized by topic with detailed explanations

ServiceNow

CIS-RC

200 questions

7 topics

Updated May 2026

GRC Overview

23 questions7 easy12 medium4 hard~11% of exam

How does ServiceNow expect an organization to structure its risk universe in GRC?A team member needs limited operational access for assigned attestations, remediation work, acknowledgements, policy exc...An administrator activates the base GRC plugin. Which shared components should they expect to be installed immediately?

Implementation Planning

10 questions4 easy4 medium2 hard~5% of exam

When starting Policy and Compliance setup, what should be done before application-specific configuration?A customer wants Regulatory Change Management. Which prerequisite combination must already be installed?In the documented Regulatory Change Management setup sequence, which step comes immediately before internal taxonomy map...

Entity Framework

40 questions8 easy18 medium14 hard~20% of exam

Which sequence matches ServiceNow's documented top-down scoping approach?A GRC architect created entity types and mapped them to existing tables, but risk and control instances still are not ge...Which statement about entity usage across the suite is correct?

Policy and Compliance

50 questions12 easy25 medium13 hard~25% of exam

Which pair extends sn_grc_content?Which pair extends sn_grc_document?Which application provides structured workflows for identifying, assessing, and continuously monitoring control activiti...

Risk and Advanced Risk

50 questions12 easy26 medium12 hard~25% of exam

Which choice is a documented factor type?What happens to a risk after it is accepted for the defined period?In Advanced Risk Assessment, what are factors?

Common Elements and Extended Capabilities

17 questions5 easy9 medium3 hard~8% of exam

Which integration pattern is officially documented for continuous risk monitoring of high-impact vulnerabilities?What is a documented benefit of GRC content packs?In the continuous-monitoring pattern tied to Vulnerability Response, which entity type starts inactive by default?

Audit and Advanced Audit

10 questions4 easy6 medium~5% of exam

What is an audit plan in ServiceNow Audit Management?When can engagements be added to or removed from an audit plan?How is Audit Management obtained and configured according to ServiceNow?

All Questions

#	Question	Topic	Difficulty
1	Which sequence matches ServiceNow's documented top-down scoping approach?	Entity Framework	medium
2	Which choice is a documented factor type?	Risk and Advanced Risk	medium
3	Which pair extends sn_grc_content?	Policy and Compliance	medium
4	What happens to a risk after it is accepted for the defined period?	Risk and Advanced Risk	medium
5	Which pair extends sn_grc_document?	Policy and Compliance	medium

Sign in to see all 200 questions

Create a free account to browse all questions — completely free during our launch phase.

Sign Up Free Sign In

Ready to test your knowledge?

Take a full Certified Implementation Specialist - Risk and Compliance practice test with timed exam simulation.

Start Practice Test