Question 1

In order to evaluate a vendor on a recurring basis, configure a record in this table:

Options :

A : Repeating Surveys

B : Assessment Metric

C : Repeating Assessments

D :

Assessment Metric Type

Correct Answer: C

Answer: C

Question 2

Which of the following is an objective of Vendor Risk Management? (Choose two.)

Options :

A : To help vendors improve their security posture and preparedness

B : To assess and manage the risk from interactions with vendors and third parties

C : To help negotiate the best possible price for a product or service from the vendor

D : To verify that vendors have adequate measures and processes in place to ensure profitability of vendor

Answer: A,B

Question 3

Who is able to change the password for the vendor contact? (Choose two.)

Options :

A : Vendor Contract Relationship Manager

B : sys_admin

C : Vendor contact via the Forgot Password link

D : Vendor Risk Reviewer

Answer: B,C

Question 4

Which of these must be true in order for a vendor risk issue to be visible in the Vendor Portal?

Options :

A : There must be at least one secondary contact for the vendor

B : The primary vendor contact must have the sn_vdr_issues role

C : Issues are always visible in the vendor portal

D : The Visible in vendor portal field must have a value of true

Answer: D

Question 5

To what type of assessment record can a vendor contact respond?

Options :

A : Vendor tiering assessment

B : Vendor risk assessment

C : Customer assessment

D : External monitoring assessment

Answer: B