Question 1

Policies can be automatically published after which of the following occurs?

Options :

A : Related control objectives are marked active

B : Policy exception is closed

C : Policy is approved by all approvers

D : Policy is approved by one approver

Answer: A

Question 2

What would you use in order to accommodate a customer's unique process around policy approvals? For example, each policy needs a second layer of approval.

Options :

A : Create a new field and create notifications

B : Add a new related list to keep track of who has already approved it and who hasn't approved yet

C : Add a UI Action to track who the stakeholders are

D : Create a new workflow in the workflow editor

Answer: A

Question 3

What are some of the features of scoped applications for GRC? (Choose three.)

Options :

A : Requires an entitlement for all environments

B : All components have a namespace prefix for identification

C : Provides access to all global data

D : Ability to view all components from the sys_metadata table

E : Ability to restrict access to available data

Answer: A,D

Question 4

What are the terms for level of risk before and after any actions are taken? (Choose two.)

Options :

A : Operational risk

B : Digital risk

C : Inherent risk

D : Calculated risk

E : Residual risk

F : Solutioned risk

Answer: A

Question 5

Entity Types are applied to which types of records? (Choose three.)

Options :

A : Risk Statement

B : Issue

C : Risk

D : Control Objective

E : Policy

F : Control

Answer: A,C