Question 1

An assessor is trying to complete an operational assessment on a control for manual AP Invoice entry and isreviewing Prior Results.Which statement is true about viewing Prior Results for this control?

Options :

A : He or she will be able to review results of all prior assessments of all types for this control.

B : He or she will be able to review results of all prior Audit tests and operational assessments for this control.

C : He or she will be able to review only results of prior operational assessments for this control.

D : He or she will be able to review results of all prior operational assessments for all controls.

E : He or she will be able to review results of all prior assessments of all types for all controls.

Answer: B

Question 2

Which three are true about implementing a best practice solution for Financial Reporting Compliance? (Choose three.)

Options :

A : Large scope of project requires high effort for maintenance and administration.

B : It promotes rapid implementation and go-live.

C : It promotes go-live with minimal acceptance testing and user training.

D : It provides maximum return on investment with minimum project risk.

E : It promotes successful adoption and minimizes on-going cost of operation.

Answer: A,B,D

Question 3

You completed the data migration successfully. You created 100 controls, an Organization Perspective, andrelationship of controls to the Organization Perspective. All controls are related to one perspective item. TheControl Manager logs in to the application to view the new controls, yet there are none available for his or herreview.Identify three reasons for this. (Choose three.)

Options :

A : The Control Manager was not given the correct data security policy to access the controls.

B : The Perspective Hierarchy was not associated to the Control Object.

C : There was no Control Type associated with the controls.

D : The Perspective Hierarchy is not in the Approved state.

E : No risks were mapped to the imported controls.

Answer: A,C

Question 4

You have imported risks in Financial Reporting Compliance using data migration. Your client is asking if youcan add controls for these risks.Which two statements are true? (Choose two.)

Options :

A : To relate controls to risks, the risks must be in “approved” state.

B : You cannot use the Data Migration tool to add control records to map to existing risks.

C : You can use the Data Migration tool to add control records for the existing risks.

D : To relate controls, risks must be assigned to the same perspective that is assigned to the control you want to map it to.

E : You can manually add control definitions and relate them to the risks in Financial Reporting Compliance.

Answer: C,D

Question 5

Your customer needs to conduct monthly Operational Effectiveness assessments for controls across twoorganizations (North America and EMEA). Your customer requires that assessment results for North Americabe accessible only to users in North America and likewise for EMEA. Additionally, the Chief Risk Officerreviews the assessment results by Business Process every week.How should you design perspectives to achieve this?

Options :

A : Use the Region hierarchy for security and the Business Process hierarchy for reporting of controls.

B : Use the Region hierarchy initially, and later use both Region and Business Process hierarchies for security.

C : Use both Region and Business Process hierarchies solely for reporting purposes.

D : Use the Business Process hierarchy for security and the Region hierarchy for reporting of controls.

Answer: A