Practice CIS-TPRM Exam Online

Question 1

To what type of assessment record can a vendor contact respond?

A : Vendor tiering assessment

B : Vendor risk assessment

C : Customer assessment

D : External monitoring assessment

Answer: B

Question 2

Which statements most accurately describe assignments to vendor contacts? (Choose two.)

A : Individual sections in the questionnaire or document request can be assigned

B : A questionnaire or document request cannot be assigned to multiple vendor contacts

C : A questionnaire can be read by vendor contacts that are not assigned

D : A questionnaire can only be completed by assigned vendor contacts

Answer: A,D

Question 3

What are some of the purposes of a Vendor Risk Issue? (Choose two.)

A : Log access-related incidents for the vendor portal

B : Indicate vendors that need further assessment

C : Accept risks identified in the assessment

D : Track remediation of compliance gaps

Answer: B,D

Question 4

Which of these must be true in order for a vendor risk issue to be visible in the Vendor Portal?

A : There must be at least one secondary contact for the vendor

B : The primary vendor contact must have the sn_vdr_issues role

C : Issues are always visible in the vendor portal

D : The Visible in vendor portal field must have a value of true

Answer: D

Question 5

Which of the following is an objective of Vendor Risk Management? (Choose two.)

A : To help vendors improve their security posture and preparedness

B : To assess and manage the risk from interactions with vendors and third parties

C : To help negotiate the best possible price for a product or service from the vendor

D : To verify that vendors have adequate measures and processes in place to ensure profitability of vendor

Answer: A,B

Name:	Certified Implementation Specialist - Third-party Risk Management
Exam Code:	CIS-TPRM
Certification:	Certified Implementation Specialist
Vendor:	ServiceNow
Total Questions:	60
Last Updated:	Feb 11, 2026

ServiceNow CIS-TPRM Answers