Question 1

Who is able to change the password for the vendor contact? (Choose two.)

Options :

A : Vendor Contract Relationship Manager

B : sys_admin

C : Vendor contact via the Forgot Password link

D : Vendor Risk Reviewer

Answer: B,C

Question 2

Where do vendors manage issues, respond to requests, and fulfill tasks assigned to them?

Options :

A : Spreadsheets

B : Vendor Portal

C : ServiceNow Platform

D : Email

Answer: B

Question 3

Which statements most accurately describe assignments to vendor contacts? (Choose two.)

Options :

A : Individual sections in the questionnaire or document request can be assigned

B : A questionnaire or document request cannot be assigned to multiple vendor contacts

C : A questionnaire can be read by vendor contacts that are not assigned

D : A questionnaire can only be completed by assigned vendor contacts

Answer: A,D

Question 4

During the Generating Observations phase of the Vendor Risk Assessment, what action might be taken by the Risk Assessor?

Options :

A : Create issues from the assessment if necessary

B : Update the vendor risk score

C : Email the vendor

D : Answer questions the vendor forgot to answer

Answer: A

Question 5

What are some of the purposes of a Vendor Risk Issue? (Choose two.)

Options :

A : Log access-related incidents for the vendor portal

B : Indicate vendors that need further assessment

C : Accept risks identified in the assessment

D : Track remediation of compliance gaps

Answer: B,D