Scope OF System →hardMultiple ChoiceObjective-mapped

CGRC Scope OF System Practice Question

You are assessing a system that utilizes a shared service for identity management. How should this be reflected in the system's authorization boundary?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

List the identity service as an external provider and inherit the controls.

When using shared services, the system owner documents the inheritance of controls from the shared service provider.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Force the service provider to sign a full system authorization for you.
Why it's wrong here
This is not an RMF process; service level agreements/MOUs are used.
✓
List the identity service as an external provider and inherit the controls.
Why this is correct
Inheritance is the correct mechanism for shared services in RMF.
✗
The identity service must be fully assessed as part of your system.
Why it's wrong here
Shared services are typically assessed once and inherited.
✗
Exclude the identity service from the documentation entirely.
Why it's wrong here
Excluding critical services results in a failed audit.

About these practice questions

This CGRC question is part of Courseiva's 199-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official (ISC)² exam blueprint

Ready to practise?

Turn this into a habit — start a practice session.

Start practice session

Practice tests

Work through a scored set and see where your weak spots actually are.

CGRC Practice Test 4 — 25 Questions→CGRC Practice Test 5 — 25 Questions→CGRC Practice Questions 2 — 50 Questions→

Study by exam domain

Each of these maps to a scored section of the exam blueprint.

Scope OF System Control Implementation GRC Program Assessment And Audit

Filter by question format

Pick a question style and work only that format until it feels routine.

Browse scenarios

Practice by topic

Target a specific weak area. Each page focuses on one exam topic with questions, explanations and a concept guide.

Scope OF System practice questions Control Implementation practice questions GRC Program practice questions System Compliance practice questions CGRC fundamentals practice questions

Where to go next

Study guide CGRC practice test Exam domains

This CGRC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CGRC exam.