CIS-RCI 무료 덤프문제 온라인 액세스

Praveen is a Risk Manager. Why would he want to utilize Entity Types and Entities? (Choose three.)

• A.To perform risk reporting
• B.To perform policy exceptions
• C.To perform risk assessments
• D.To remediate vulnerabilities
• E.To monitor risk exposure

What is the minimum role required to create a risk assessment methodology (RAM)?

• A.sn_risk.manager
• B.sn_compliance.admin
• C.sn_risk.user
• D.sn_risk.admin

When reviewing the Control Objective Table form with your customer, what are the most common choice lists to be configured? (Choose three.)

• A.Category
• B.Reference
• C.Type
• D.Classification
• E.Description

The overall goal of Entity Classes is to:

• A.Associate Control Objectives and Risk Statements with Risks and Controls
• B.To provide specific information about an Entity, such as who owns the Entity
• C.Show relationships between Entities and policies and map them directly to Citations
• D.To enable reporting and to support advanced risk assessment

UCF has a collection of what? Select all UCF terms.
(Choose three.)

• A.Policies
• B.Authority Documents
• C.Control Indicators
• D.Controls
• E.Citations