A pilot deployment's governance platform needs its policies, questionnaires, and workflows to actually reflect the organisation's obligations. What should be configured?
Select an answer to reveal the explanation.
Short Explanation
Default text describes nobody's obligations in particular. You have to map policies, questionnaires, and workflow requirements to your actual governance obligations before they mean anything.
Full Explanation
The correct choice is policies, questionnaires, and workflow requirements that are explicitly mapped to the organisation's actual governance obligations, rather than left at their default state. Governance obligations vary by organisation, jurisdiction, and use case, so the platform's configuration has to be deliberately mapped to those specifics rather than run as-shipped.
The answer that says to use the platform's default templates, left unedited, is incorrect because default templates are generic starting points, not a substitute for the organisation's own requirements; using them unedited leaves the real obligations unaddressed.
The answer that says to configure only the workflow routing rules is incorrect because questionnaires and policies drive what evidence is captured and what gets flagged, which directly affects whether an obligation is actually being met.
The answer that says to apply a single generic policy to every asset regardless of its risk tier or use case is incorrect because a single generic policy cannot reflect the different obligations that apply to a low-risk internal tool versus a high-risk customer-facing system.
For the exam, expect configuration, not default acceptance, to be the correct action whenever obligations are organisation-specific.