CertsPoint
Sign In Get Started
See all results for ""
Exams About Us
Sign In Get Started
Exam Overview
Exam Code CIS-TPRM
Exam Name ServiceNow Third-party Risk Management Implementation Specialist (CIS-TPRM)
Vendor Servicenow
Total Questions 55
Last Updated 26-Oct, 2026
Free CIS-TPRM Questions Get Premium Access
Why CertsPoint?
  • Latest & Verified Questions
  • Detailed Explanations
  • Regular Updates
  • Full-Length Practice Tests
  • Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent
4.6 (398 Up Votes)
Secure Payment Privacy Protected Money Back Guarantee

Free CIS-TPRM Practice Questions

Explore 5 free practice questions for the Servicenow CIS-TPRM exam and review the answers and explanations to support your preparation.

  1. Question 1

    Multiple answers

    What types of due diligence requests can be made by an employee through the Employee Center? (Choose 5 answers)

    • Option A:
      Onboard a primary contact
      Correct
    • Option B:
      Cancel an engagement
      Correct
    • Option C:
      Reassess and existing engagement for contract renewal
      Correct
    • Option D:
      Reassess an existing engagement
      Correct
    • Option E:
      Offboard an engagement with NO due diligence
      Correct
    • Option F:
      Onboard a new engagement
      Correct
    • Option G:
      Offboard an engagement with due diligence 
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C, D, E, F, G

    Explanation

    In ServiceNow Employee Center (Due Diligence / Third-Party Risk workflows), employees can submit specific types of due diligence requests related to managing vendor or engagement lifecycle activities. These include reassessing an existing engagement (D) to review updated risk or compliance status, and reassessing an engagement for contract renewal (C) when a contract is being extended and needs fresh evaluation. Employees can also request offboarding of an engagement with no due diligence (E) when risk review is not required, or offboarding with due diligence (G) when a formal risk assessment is necessary before termination. Additionally, they can onboard a new engagement (F) to initiate due diligence before working with a new third party.

  2. Question 2

    Single answer

    What Third-party Risk Management feature pinpoints the geographical locations of active third parties and engagements? 

    • Option A:
      Third-party engagement page
      Correct
    • Option B:
      Third-party geographic view
      Correct
    • Option C:
      Risk concentration map
      Correct
    • Option D:
       Risk engagement atlas 
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: D

    Explanation

    In ServiceNow Third-Party Risk Management (TPRM), the Risk Concentration Map provides a visual, geographical representation of where active third parties and their engagements are located. This helps organizations quickly identify risk exposure across regions, understand geographic clustering of vendors, and assess potential regional risk impacts such as regulatory, geopolitical, or operational risks.

  3. Question 3

    Single answer

    Which Due Diligence workflow process allows the negotiator to access all the data from the preceding processes in the Due Diligence workflows to design and settle the contract?

    • Option A:
      ESG Review
      Correct
    • Option B:
      IRQ
      Correct
    • Option C:
      Due Diligence
      Correct
    • Option D:
       Contract Risk
      Correct
    • Option E:
      Financial Assessment 
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: D

    Explanation

    In ServiceNow Third-Party Risk Management (TPRM), the Contract Risk workflow is the stage where the negotiator gets access to all outputs from previous due diligence processes (such as financial, ESG, and inherent risk assessments). This consolidated view allows them to evaluate risk exposure in context and properly design, negotiate, and finalize the contract terms based on the overall risk profile of the third party.

  4. Question 4

    Single answer

    What is the primary goal of Due Diligence Requests in the Assessment Configuration process?

    • Option A:
      To ensure the timely payment of invoices by third parties.
      Correct
    • Option B:
      To gather essential information to evaluate a third party's risk posture.
      Correct
    • Option C:
      To negotiate better contract terms with third parties.
      Correct
    • Option D:
      To identify potential third-party partners for future projects. 
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

    Explanation

    In ServiceNow Third-Party Risk Management (TPRM), Due Diligence Requests are used during Assessment Configuration to collect structured and relevant information from third parties or internal stakeholders. This information is then used to assess and evaluate the third party’s risk posture, helping the organization identify, measure, and manage potential risks before onboarding or continuing a relationship.

  5. Question 5

    Single answer

    To what type of assessment record can a vendor contact respond?

    • Option A:

      Vendor tiering assessment

      Correct
    • Option B:

      Vendor risk assessment

      Correct
    • Option C:

      Customer assessment

      Correct
    • Option D:

      External monitoring assessment 

      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

    Explanation

    In ServiceNow Third-Party Risk Management (TPRM), a vendor contact can respond to Vendor Risk Assessment records because these assessments are specifically designed to collect risk-related information directly from external vendors or their representatives. This allows organizations to evaluate the vendor’s security, compliance, and operational risk posture based on firsthand input, making Vendor Risk Assessment the correct assessment type for vendor responses.