CertsPoint
Sign In Get Started
See all results for ""
Exams About Us
Sign In Get Started
Exam Overview
Exam Code CIS-RCI
Exam Name Certified Implementation Specialist - Risk and Compliance
Vendor Servicenow
Total Questions 165
Last Updated 26-Oct, 2026
Free CIS-RCI Questions Get Premium Access
Why CertsPoint?
  • Latest & Verified Questions
  • Detailed Explanations
  • Regular Updates
  • Full-Length Practice Tests
  • Boost Your Exam Confidence

PDF Study Materials

Downloadable guides and resources

Practice Tests

Full-length tests with real exam experience

Progress Tracking

Monitor your performance and improvement

Study Anywhere

Access on desktop, tablet, and mobile

Excellent
4.6 (398 Up Votes)
Secure Payment Privacy Protected Money Back Guarantee

Free CIS-RCI Practice Questions

Explore 5 free practice questions for the Servicenow CIS-RCI exam and review the answers and explanations to support your preparation.

  1. Question 1

    Single answer

    What table, along with the Policy table, is linked to the Control Objective table by a many-to-many
    relationship?

    • Option A:
      Entity Class
      Correct
    • Option B:
      Citation
      Correct
    • Option C:
      Authority Documents
      Correct
    • Option D:
      Risk Framework
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

    Explanation

    In ServiceNow GRC/IRM, the Control Objective table is linked through a many-to-many relationship with both the Policy table and the Citation table. The Citation table represents regulatory or compliance references that map controls to external standards, laws, or frameworks, helping ensure traceability between control objectives and compliance requirements.

  2. Question 2

    Single answer

    Which of the following statements is true of a Risk Response task?


    • Option A:
      Only one Risk Response task can be related to a Risk at a time
      Correct
    • Option B:
      Only users with the risk_manager role or higher can be assigned to a Risk Response task
      Correct
    • Option C:
      The risk admin role is required to assign the Risk Response task
      Correct
    • Option D:
      The Risk Response task is automatically progressed through the states using a worflow
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: C

    Explanation

    In ServiceNow IRM (Integrated Risk Management), Risk Response tasks are used to manage mitigation or treatment actions for a risk. Assignment and management of these tasks are restricted to users with appropriate governance permissions, and in many configurations, the risk_admin role is required to assign and manage Risk Response tasks to ensure proper control over risk treatment workflows and compliance accountability.

  3. Question 3

    Single answer

    Which role is not part of ServiceNow GRC?

    • Option A:
      Risk User
      Correct
    • Option B:
      Risk Developer
      Correct
    • Option C:
      Risk Manager
      Correct
    • Option D:
      Risk Reader
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B

    Explanation

    In ServiceNow GRC (Governance, Risk, and Compliance / IRM), standard roles include Risk User, Risk Manager, and Risk Reader, which are part of the out-of-the-box role structure used for managing risk activities and access. However, Risk Developer is not a standard or baseline GRC role, as development activities are handled by platform roles like admin or app-specific configuration roles, not a dedicated “risk developer” role.

  4. Question 4

    Multiple answers

    What are some characteristics of the ServiceNow Store? (Choose four.)

    • Option A:
      Some applications are certified by ServiceNow


      Correct
    • Option B:
      All applications are certified by ServiceNow
      Correct
    • Option C:
      Applications may be developed by ServiceNow Technology Partners
      Correct
    • Option D:
      It houses both paid and free applications and integrations
      Correct
    • Option E:
      Applications are built om the ServiceNow platform
      Correct
    • Option F:
      Applications are certified by other developers
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: A, C, D, E

    Explanation

    The correct answer is A, C, D, E because the ServiceNow Store includes a mix of applications where some apps are certified by ServiceNow (A) after review, while others are developed and published by ServiceNow Technology Partners (C). The store contains both free and paid applications and integrations (D), giving organizations flexibility based on their needs and budgets. All applications available in the store are built on the ServiceNow platform (E), ensuring compatibility and consistency with the Now Platform architecture. However, not all applications are certified, and certification is handled by ServiceNow rather than external developers, which makes options B and F incorrect.

  5. Question 5

    Multiple answers

    Which of the following tables exist within the GRC: Profiles application scope? (Choose three.)

    • Option A:
      Document
      Correct
    • Option B:
      Policy
      Correct
    • Option C:
      Risk
      Correct
    • Option D:
      Content
      Correct
    • Option E:
      Indicator
      Correct
    Show Answer & Explanation Hide Answer & Explanation

    Correct Answer: B, C, E

    Explanation

    The correct answer is B, C, E because within the GRC: Profiles application scope, ServiceNow includes core tables that support risk and compliance profiling rather than document or policy content management. The Risk table (C) is part of the profiling scope as it captures risk records associated with profiles, while the Content table (D) and Indicator table (E) are also included because they support assessment content and measurement tracking within profiles. However, Document (A) and Policy (B) belong to separate GRC/IRM scopes related to policy and compliance management rather than the Profiles application scope, which is focused on risk and performance data structures.