2 packs: 15% off with code BUY2. 3 or more: 20% off with code BUY3.

ServiceNow CIS-RC Exam Practice Questions, practice question pack
SERVICENOW · CIS-RC

ServiceNow CIS-RC Exam Practice Questions

99% pass rateUpdated 1 Nov 2026289 questions2 PDFs by email
4.02 reviews
(2 customer reviews)

US$39

Every question with the correct answer and why the other options are wrong.

Download the free sample

Card, Apple Pay, Google Pay or PayPal. Your PDF is prepared and emailed to you after checkout, usually within a few hours.

99% pass rate. Pass or your money back.Fail the exam after using this pack and we refund it, or swap it for any other pack. How the guarantee works
Category:
TRY BEFORE YOU BUY

Three of the 289 questions in this pack

Question 1

Who can move a Policy into Review? (Choose two.)

  1. sys admin
  2. policy approver
  3. policy reviewer
  4. policy owner
Show answer and explanation

Correct answer: B, D. policy approver; policy owner

A Policy moves into Review state through actions by specific roles. The Policy Approver and Policy Owner are the roles authorized to initiate the move to Review status. The sys admin and policy reviewer do not have the authority to move policies into Review; their roles are either administrative overhead or occur after the Review state.

Why the other options are wrong

  • A. Sys admin does not have policy workflow permissions to move policies into Review
  • C. Policy reviewer reviews policies that are already in Review state; they do not move policies into Review

Question 2

The Citation table is a child table of which parent?

  1. Content
  2. Authority Document
  3. Item
  4. Document
Show answer and explanation

Correct answer: A. Content

The Citation table is a child table of the Content table in the GRC data model. Citations reference sources and authorities that support content within policy and control documentation, establishing a parent-child relationship where Content is the parent entity.

Why the other options are wrong

  • B. Authority Document is related to citations but is not the direct parent table
  • C. Item is a separate entity and not the parent of Citation
  • D. Document is too generic and not the specific parent table for Citation

Question 3

Control Failure Factor represents the impact of Control Failures on what score?

  1. Inherent
  2. Residual
  3. Total
  4. Calculated
Show answer and explanation

Correct answer: B. Residual

Control Failure Factor represents the impact of control failures on the Residual risk score. The Residual risk score reflects the risk remaining after controls are applied, and control failures directly reduce the effectiveness of those controls, thereby affecting the residual risk calculation.

Why the other options are wrong

  • A. Inherent risk is independent of control failures and is not impacted by the Control Failure Factor
  • C. Total is not a standard risk score type in GRC frameworks
  • D. Calculated is not the specific risk score impacted by Control Failure Factor

See all 72 free questions Get the full pack, US$39

REVIEWS

2 reviews for ServiceNow CIS-RC Exam Practice Questions

  1. Mona –

    I will try next ServiceNow exams next month.

  2. Daphne –

    I have reviewed and found that your CIS-RC questions are the new Risk and Compliance questions.

Only logged in customers who have purchased this product may leave a review.

How much of the ServiceNow CIS-RC bank is free?

289 questions in the bank

Each step includes the one before, so buying only adds new questions.

  • You are here10questionsFree sampleThree on this page, all ten as a PDF.Download the sample
  • 7225% of the bankPractice pageFree on the site, every answer explained.Go to the practice page
  • 139the first half of the packHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
  • 289100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
ABOUT THIS PACK

What’s in the ServiceNow CIS-RC pack

  • 289 questions across all seven CIS-RC exam domains
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Delivered by email shortly after checkout
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

A CIS-RC attempt costs US$450. This pack is US$39, paid once.

What makes the CIS-RC hard

CIS-RC is the implementation exam for ServiceNow's Integrated Risk Management suite, which most people still call GRC, and half of it sits in two domains: policy and compliance, and risk. The exam runs 60 questions in 90 minutes, and what separates it from the other CIS exams is the entity framework, a scoping model that nothing else on the platform uses and that every later domain depends on.

Policy and Compliance and Risk and Advanced Risk each carry 25%. Policy and compliance covers the record lifecycles for policies, policy statements, controls and control objectives, the authority documents and citations behind them, the architecture and configuration of the compliance application, indicators, attestations and issues. Risk covers the risk framework, risk statements and risk records, inherent and residual scoring, risk assessments and the advanced risk features, risk events and the risk register.

Entity Framework (20%) covers entity scoping and the entity type versus entity class approach. GRC Overview (11.67%) covers positioning, the framework and the terminology. The remaining marks split between Common Elements and Extended Capabilities (8.33%), Implementation Planning (5%) and Audit and Advanced Audit (5%). Roles come up constantly, so knowing which persona owns each stage of each lifecycle matters as much as the process itself.

About the exam

CIS-RC (Certified Implementation Specialist: Risk and Compliance) certifies the ability to implement ServiceNow Integrated Risk Management: GRC overview, implementation planning, the entity framework, policy and compliance, risk and advanced risk, common elements and extended capabilities, and audit. ServiceNow recommends the GRC: Integrated Risk Management (IRM) Fundamentals and GRC: Integrated Risk Management (IRM) Implementation courses.

Questions before you buy

How quickly do I receive it?

Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

What is your pass rate?

99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.

Related products