VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Certified Implementation Specialist - Third-party Risk Management Free Sample Questions

Description

Covers third-party risk management fundamentals, portfolio and contact configuration, risk intelligence scoring, due diligence and tiering assessments, the third-party portal, and approval workflows.

12 free sample questions150 in the full practice test

Try simulator

CIS-TPRM Sample Questions

  1. Question 1

    Beginner

    Third-party Risk Management Fundamentals and Third-party Risk Management Review · About Third-party Risk Management

    What is the primary business value of the ServiceNow Third-party Risk Management (TPRM) application?

    Answer and explanation

    Correct answer: A

    The primary purpose of the TPRM application is to centralize, standardize, and automate the third-party risk lifecycle. It eliminates the need for manual tracking via emails and spreadsheets, providing a single source of truth for vendor risk data, assessments, and issues.

  2. Question 2

    Intermediate

    Third-party Risk Management Fundamentals and Third-party Risk Management Review · Third-party Risk Management Process

    Which of the following represents the standard logical sequence of the end-to-end Third-party Risk Management process in ServiceNow?

    Answer and explanation

    Correct answer: D

    The standard TPRM process begins with Onboarding the third party. Next, Tiering (via IRQ) determines the risk level. Based on the tier, an Assessment is conducted. Any findings result in Issue Management. Finally, the relationship enters Continuous Monitoring to track ongoing risk.

  3. Question 3

    IntermediateMultiple answers

    Third-party Risk Management Fundamentals and Third-party Risk Management Review · Technical Details

    When configuring reports for the TPRM application, which of the following are core tables you would frequently query? (Select TWO)

    Answer and explanation

    Correct answers: C, D

    The core_third_party table is the foundational table for storing third-party organizational records in the TPRM application.

    The sn_vdr_risk_asmt_assessment table stores the actual risk assessment records sent to third parties, making it critical for TPRM reporting.

  4. Question 4

    Beginner

    Third-party Risk Management Fundamentals and Third-party Risk Management Review · Technical Details

    In ServiceNow GRC, risks that are registered within an organization and applied to third parties are typically captured as which type of record?

    Answer and explanation

    Correct answer: A

    In the ServiceNow GRC architecture, registered risks are captured as Risk Statements. These statements can be applied to various entities, including third parties, to track and evaluate specific risk exposures consistently across the enterprise.

  5. Question 5

    Intermediate

    Third-party Risk Management Fundamentals and Third-party Risk Management Review · About Third-party Risk Management

    A client wants to ensure that external vendors can log in, complete questionnaires, and manage their own contacts. Which ServiceNow feature is specifically designed for this purpose, and should not be confused with customer support portals?

    Answer and explanation

    Correct answer: D

    The Third-party Portal is the dedicated interface within the TPRM application for external vendors. It allows them to securely respond to assessments, manage issues, and update their contacts. It is distinct from the Customer Service Portal, which is used for external customer support queries.

  6. Question 6

    Beginner

    Third-party Risk Management Fundamentals and Third-party Risk Management Review · Third-party Risk Management Process

    Review the following TPRM process flow:

    flowchart LR A[Onboarding] --> B[Tiering] B --> C[Assessment] C --> D[Issue Management] D --> E[Monitoring]

    During which phase of this lifecycle does the platform typically utilize an Inherent Risk Questionnaire (IRQ)?

    Answer and explanation

    Correct answer: B

    The Inherent Risk Questionnaire (IRQ) is utilized during the Tiering phase. It is typically sent to an internal business owner to assess the inherent risk of engaging with the third party. The responses dictate the third party's Rank Tier, which subsequently drives the type and rigor of the due diligence and risk assessment required in the next phase.

Register free for 6 more questions

Or unlock all 150 CIS-TPRM questions with explanations, timed mode and flashcards.

Related practice tests

All ServiceNow practice exams