ServiceNow CIS-RC Practice Questions

Answer: B

Why this is correct
The Analyze a risk event page describes the Near miss option as one that can either be modified or be automatically set based on the event type. If the event sub type is Actual and the Full rapid recovery option is selected, the Near miss option is automatically selected. Full rapid recovery is selected when the total loss is recovered within a short duration and does not impact the organization; the note says that a short duration generally refers to five working days, and that this value can be configured. An actual event that was fully recovered so quickly is treated as a near miss.

Why the other options are wrong
"Sub type Potential, with a negative Potential loss" … This combination selects the Financial gain option automatically: a potential event whose loss estimate, such as Potential loss, has a negative value because of the gain. It is the gain flag, not Near miss.
"Sub type Actual, with a negative value in Net loss" … This is the other condition for Financial gain: an actual risk event whose Net loss field has a negative value. The form marks the event as a gain, not as a near miss.
"Boundary event selected, with Credit as the type" … A boundary event is an operational risk event that leads to a consequence, such as a financial loss in another risk category, and Credit is an External risk type. They describe credit or market risk, not a near miss.

Key point
For a potential event, the analyst selects Near miss and enters in Reason for near miss why the event did not incur the loss. Analyzing an event needs the sn_risk.manager role; during analysis the event can be rejected if it does not appear to be an actual risk event, or more information can be requested. Request Approval then sends the event for approval.