Question 6

You are configuring security and you do not want the risks to go through the review and approve process each time they are updated. How will you meet this requirement?
  • Question 7

    Your client is configuring their Test pod (which has no data) and has created their initial import template with controls, test plans, perspectives, and perspective-control mappings. They have used custom list of values for Control Frequency.
    Which three tasks must be completed before performing the data import? (Choose three.)
  • Question 8

    You are advising your client on design and configuration related to how access incident results will be viewed and managed. The client has provided a list of business requirements:
    Incident results can be viewed by Department
    Groups of investigators receive assigned incidents based on Department
    Must ensure systematically that no incident is unassigned to an investigator Which three must be configured to support these requirements? (Choose three.)
  • Question 9

    Which part of the security structure cannot be created or viewed from the Security Console, when configuring security for Financial Reporting Compliance?
  • Question 10

    An assessor is trying to complete an operational assessment on a control for manual AP Invoice entry and is reviewing Prior Results.
    Which statement is true about viewing Prior Results for this control?