1Z0-958 Online Practice Questions and Answers

Which three steps can be performed by using the Configure Module Objects pages? (Choose three.)

A. Choose display (or hide) configurable options for: results, events, consequences and treatments.

B. Set "object-perspective" association.

C. Create object data import templates.

D. Edit the assessment activity question and guidance text for all assessment types.

E. View assessment response details for all assessment types.

You are implementing Advanced Access Controls and there is a requirement for a control to monitor user

access to specific, client-defined access points which give users the ability to both initiate a purchase order

and approve payments on that purchase order.

Which is a valid option to implement the control?

A. From the "Access Entitlements" page create two entitlements containing the respective client-defined access points. Create an access model from the "Models" tab of Advanced Controls, based on the entitlements you created.

B. Select Actions > Create Access Control from the "Controls" tab of Advanced Controls.

C. Create an access model from the "Models" tab of Advanced Controls, and then define an access point filter for each individual client-defined access point.

D. From the "Access Entitlements" page create two entitlements containing the respective client-defined access points. Create an access model from the "Models" tab of Advanced Controls, based on the entitlements you created. Finally, deploy an access control in the "Controls" tab of Advanced Controls, and select the access model you created.

E. Create an access entitlement from the "Access Entitlements" page, then select Actions > Create Access Control from the "Controls" tab of Advanced Controls, and select the entitlement you created.

You have built a transaction model to identify possible duplicate charges between invoicing and expense credit cards. The model logic already includes two standard filters that identify amounts and suppliers that are the same or similar, as shown:

Which additional date filter will further refine the set of duplicate charges found?

A. The "Payables Invoice" object's "Invoice Date" attribute is greater than the "Expense Report Credit Card Transaction" object's "Transaction Date" attribute.

B. The "Expense Report Credit Card Transaction" object's "Last Updated Date" attribute is greater than the "Relative Value" of 3 months.

C. The "Expense Report Credit Card Transaction" object's "Transaction Date" attribute is not blank.

D. The "Payables Invoice" object's "Invoice Date" attribute is similar to the "Expense Report Credit Card Transaction" object's "Transaction Date" attribute within +/- 10 days.

You have five business units in our company, BU1 through BU5. You want to build a transaction model to identify suppliers who have been paid more than $100,000 USD across all business units except BU5. Which two filters must be combined? (Choose two.)

A. Add a standard filter where the "Payment" object's "Organization ID" equals BU1, BU2, BU3, BU4.

B. Add a function filter grouping by "Supplier ID" where the sum of "Payment Amount" is greater than 100,000.

C. Add a function filter grouping by "Organization ID" where the sum of "Payment Amount" is greater than 100,000.

D. Add a standard filter where the "Payment" object's "Organization ID" equals BU5, and advanced option "Exclude" is checked.

E. Add a standard filter where the "Payment" object's "Organization ID" is equal to itself.

Select three fields that are required to create an impromptu assessment. (Choose three.)

A. Due Date

B. Template

C. Name

D. Reviewer

E. Perspectives

F. Activity

During an assessment, an issue was created. Your job as the Issue Manager is to review the issues and

validate them. If it is determined that they are not valid issues, you need to close them. You have found an

issue that is not valid and with Status: Open and State: Reported.

Identify the correct step to close this issue.

A. On the Manage Issues page, highlight the issue and click the Close button.

B. The assessment associated to the issue must be completed before closing the issue. Only then can you close the issue.

C. After you have completed the remediation plan, click the Close button on the Remediation Plan page.

D. Ensure that the issue status is In Edit, and then from the Actions menu, select Close Issue.

You are gathering requirements on how your client performs control assessments. Which three tasks should you complete to set up assessments in Financial Reporting Compliance? (Choose three.)

A. Identify the type of assessments included in each assessment cycle.

B. Understand the sample size for each audit test.

C. Determine if control assessments are planned ahead of time or are run impromptu.

D. Determine the main objectives of deploying the control.

E. Determine whether assessments templates, plans, and completed assessments need to go through a review and approve workflow.

Your client has three operating units.

What are two ways in which you can exclude an operating unit where there are not enough personnel to

allow segregation of duties? (Choose two.)

A. In a model, create a new condition logic filter, select the operating unit attribute, select the operating unit value, and then perform an exclusion though the advanced options check box.

B. Navigate to the Create Access Global Condition page and create a new condition logic filter, select the operating unit attribute, select the operating unit value, and then perform an exclusion though the advanced options check box.

C. Navigate to the Create Access Global Condition page and create a new condition logic filter, select the within same operating unit attribute, select the value yes, and then perform your exclusion though the advanced options check box.

D. In a model, create a new condition logic filter, select the within same operating unit attribute, select the value yes, and then perform your exclusion though the advanced options check box.

E. In a model, create a new condition logic filter, select the operating unit attribute and select the operating unit value.

During implementation, you created a risk object and successfully mapped it to a control object. The

client's Risk Owner is able to access the risk but not the control.

Why did this happen?

A. The Risk Administrator needs to run the synchronize jobs to populate the mapping.

B. The Risk Owner account is inactive.

C. The Risk Owner role does not have the right privileges.

D. The risk and control objects are inactive and need to be made active.

You want to identify Controls with the most Incidents, with the condition that the identified Controls should

have 80% of all Incidents. To do this, you have imported a custom object that contains the number of

incidents associated with each control, and have added that object to a transaction model.

Which pattern filter must you now apply?

A. Anomaly Detection

B. Mean

C. Pareto

D. Absolute Deviation

E. Clustering

You have created a risk definition R100 and have created a new control C100 for this risk. No user has been assigned the Risk or Control reviewer and approver roles. What will be the state of R100 and C100 after submitting?

A. Both R100 and C100 will be in the "In Review" state.

B. Both R100 and C100 will be in the "Awaiting Approval" state.

C. Both R100 and C100 will be in the "Approved" state.

D. Both R100 and C100 will be in the "New" state.

At the last step of initiating assessments, the assessment manager sees who the assessment participants are (to complete, review, and approve the assessments). If the assessment manager wants to change the participant, who completes the assessment, what should he or she do?

A. Modify the perspective hierarchy in the last step of initiating assessments.

B. Modify the participant list in the last step of initiating assessments.

C. Request the administrator to change the Perspective in Data Security Policy for the Control Manager's job role.

D. It is not possible to change the participants after Data Security Policies are assigned.

E. Request the administrator to assign Data Security Policies with correct perspectives to the Assessor's job role.

During implementation, you created a Financial Reporting Compliance superuser and assigned this user

the following roles:

Enterprise Risk and Control Manager

IT Security Manager

Employee

The superuser logs in to Financial Reporting Compliance but is not able to create new Data Security

Policies.

What is wrong?

A. The superuser's account is inactive and his or her account needs to be activated.

B. The application will not allow a user to both create users and assign them roles.

C. The superuser's account is created but the synchronization jobs have not been run.

D. The superuser's account is not yet approved by his or her supervisor in Financial Reporting Compliance.

The GRC Business owner responsible for reviewing and investigating access incidents related to the "Order to Cash" perspective does not see any worklists for the generated results. You have validated that:

1.

Other business owners are able to view their assigned worklists without any problem

2.

Incidents have been generated for the controls related to Order to Cash

3.

The business owner's assigned roles contain the correct functional privileges and data access to the correct perspective values

What is the reason the business owner cannot see any worklists for the generated incidents?

A. The Result Management Perspective Assignment has not been linked.

B. The underlying model is not linked to Order to Cash.

C. The business owner was recently assigned the role and the worklist needs to be refreshed.

D. Worklist assignment does not include the business owner.

E. The Control Perspectives are not linked to the control.

The control manager needs to associate an existing test plan to an additional assessment type, Audit Test.

The existing test plan is associated only with the Design Review assessment type.

How can this be accomplished?

A. The control manager should create a new test plan with Audit Test and Design Review as assessment types.

B. The control's test plan should be updated to include both Audit Test and Design Review as assessment types.

C. The control manager does not need to update the control because any initiated assessment will include all control test plans.

D. The control's test plan should be updated to Audit Test as the assessment type.