Courseiva

C_ARSUM Ariba Supplier Management Practice Question

A supplier risk manager is configuring a risk exposure model in SAP Ariba Supplier Risk. The manager wants to ensure that the model accounts for both inherent risk factors and mitigation controls. Which two components should the manager include in the risk exposure model configuration? (Choose two.)

⚠ Common exam trap

The trap here is assuming that performance scorecards or registration questionnaires are part of the risk exposure model, when in fact only risk factors and mitigation controls are used in its configuration.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Risk factors that represent inherent risk dimensions, such as geographic location and industry.

A risk exposure model in SAP Ariba Supplier Risk is built from risk factors and mitigation controls. Risk factors define inherent risk dimensions, while mitigation controls adjust the risk downward when present. Together, they allow the system to calculate both inherent and residual risk scores. The other options belong to different modules and do not directly configure the risk exposure model.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Risk factors that represent inherent risk dimensions, such as geographic location and industry.

    Why this is correct

    In SAP Ariba Supplier Risk, risk factors are the building blocks of a risk exposure model. They define the inherent risk dimensions relevant to the organization, such as country, industry, or spend category. By including appropriate risk factors, the model can calculate inherent risk scores. This is a necessary component for assessing risk before considering mitigation controls.

  • ✗

    Sourcing project templates from SAP Ariba Sourcing.

    Why it's wrong here

    Sourcing project templates are used to manage sourcing events and are unrelated to risk exposure model configuration. They do not provide inherent risk dimensions or mitigation controls. Including them would not contribute to the risk model's calculation of inherent or residual risk, and they are not part of the Supplier Risk configuration.

  • ✗

    Supplier registration questionnaires from the supplier onboarding process.

    Why it's wrong here

    Supplier registration questionnaires collect onboarding data such as company details and certifications. While some data might be used in risk assessment, they are not a component of the risk exposure model configuration. The model requires risk factors and mitigation controls, not registration questionnaires, to compute risk scores.

  • ✗

    Supplier performance scorecards from the Supplier Performance Management module.

    Why it's wrong here

    Performance scorecards are part of Supplier Performance Management and focus on operational metrics like quality and delivery. They are not directly used in risk exposure model configuration in Supplier Risk. While performance can inform risk, the risk exposure model specifically uses risk factors and controls, not performance scorecards, to calculate inherent and residual risk.

  • ✓

    Mitigation controls that are linked to specific risk factors to reduce the assessed risk.

    Why this is correct

    Mitigation controls in SAP Ariba Supplier Risk are actions or documents that reduce the likelihood or impact of a risk. Linking controls to risk factors allows the system to adjust the inherent risk score downward when controls are in place. Including mitigation controls in the risk exposure model ensures a more accurate residual risk assessment, which is essential for the manager's goal.

About these practice questions

One of 250 original C_ARSUM practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed September 2026 · checked against the official SAP exam blueprint

This C_ARSUM practice question is part of Courseiva's free SAP certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the C_ARSUM exam.