Question 1

An assessor is trying to complete an operational assessment on a control for manual AP Invoice entry and isreviewing Prior Results.Which statement is true about viewing Prior Results for this control?

Options :

A : He or she will be able to review results of all prior assessments of all types for this control.

B : He or she will be able to review results of all prior Audit tests and operational assessments for this control.

C : He or she will be able to review only results of prior operational assessments for this control.

D : He or she will be able to review results of all prior operational assessments for all controls.

E : He or she will be able to review results of all prior assessments of all types for all controls.

Answer: B

Question 2

Which controls can user A manage for the following Control Manager role Configuration? See details of perspective trees and control-perspective association below. Capture

Options :

A : All controls

B : Controls 2 and 4

C : Controls 1, 2, and 4

D : None

E : Controls 1 and 2

Answer: A

Question 3

Which three are true about implementing a best practice solution for Financial Reporting Compliance? (Choose three.)

Options :

A : Large scope of project requires high effort for maintenance and administration.

B : It promotes rapid implementation and go-live.

C : It promotes go-live with minimal acceptance testing and user training.

D : It provides maximum return on investment with minimum project risk.

E : It promotes successful adoption and minimizes on-going cost of operation.

Answer: A,B,D

Question 4

You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in yourclient’s organization. But, there are two problems with his or her security configuration.Problem 1: This person should not receive notifications to complete control assessments, but currently he orshe does.Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable toaccess controls created for individual regions within EMEA.You have given him or her the following job role:EMEA P2P Control Manager Job RoleSeeded Control Manager Duty CompositeSeeded Control Certification Assessor Duty CompositeEMEA P2P Control Manager Data Security PolicySeeded Control Manager Data Security PolicyPerspective filter where Region Perspective “equals” EMEAPerspective filter where Process Perspective “equals” P2PWhich two actions need to be taken to correct the problems? (Choose two.)

Options :

A : Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.

B : Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.

C : Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.

D : While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.

Answer: C,D

Question 5

After generating an XML file export of Advanced Controls perspectives, you receive a message that the exportjob has been generated.What are the three steps you need to perform in order to download and review the formatted export file?(Choose three.)

Options :

A : Open with an XML editor, such as Excel.

B : Navigate to Monitor Jobs and click the message link for the export job.

C : Click the Item Results link.

D : Click the Export File button.

E : Open with an HTML editor.

Answer: A,B,D