All of the following are tables which exist within the GRC Profiles application scope EXCEPT:

• A. sn_grc_profile
• B. sn_grc_profile_type
• C. sn_grc_item
• D. sn_grc_risk

Answer: (D)

GRC Profiles focuses on the structures used to define and organize profile templates: the profiles themselves, the types of profiles, and the items that compose each profile. The table that stores profile definitions (sn_grc_profile) holds the metadata for each profile. The table for profile types (sn_grc_profile_type) defines the categories or kinds of profiles you can create, helping to categorize and enforce consistency. The table for items (sn_grc_item) contains the individual components or controls that are included within a profile, representing what the profile entails.

The table sn_grc_risk, on the other hand, belongs to the broader GRC Risk area and is used to manage risk records within risk management, not within the Profiles scope. Therefore, it is not part of the GRC Profiles application scope.