Which three risk assessment activity types are available in Financial Reporting Compliance? (Choose three.)

Which two filters must be combined to identify different suppliers who use the same taxpayer ID? (Choose two.)

What would happen to an access incident in Advanced Access Controls (AAC) that has been remediated and has a status of "Closed," but poses a conflict again during a subsequent evaluation of controls?

You are implementing Advanced Access Controls and there is a requirement for a control to monitor user access to specific, client-defined access points which give users the ability to both initiate a purchase order and approve payments on that purchase order.
Which is a valid option to implement the control?

You are implementing Advanced Access Controls for a client. You need to create a model that returns users who have been assigned a specified access point but excludes a specific operating unit.
Which business object(s) do you need to add to your model to accomplish this objective?