ServiceNow CIS-SIR ServiceNow Certified Implementation Specialist - Security Incident Response Exam Exam Practice Test Questions

• Question 1

  This type of integration workflow helps retrieve a list of active network connections from a host or endpoint, so it can be used to enrich incidents during investigation.

  • Security Incident Response -- Get Running Services
  • Security Incident Response -- Get Network Statistics
  • Security Operations Integration -- Sightings Search
  • Security Operations Integration -- Block Request

  Show Answer Answer: 2 Next

• Question 2

  The severity field of the security incident is influenced by what?

  • The cost of the response to the security breach
  • The impact, urgency and priority of the incident
  • The time taken to resolve the security incident
  • The business value of the affected asset

  Show Answer Answer: 4 Next

• Question 3

  What makes a playbook appear for a Security Incident if using Flow Designer?

  • Actions defined to create tasks
  • Trigger set to conditions that match the security incident
  • Runbook property set to true
  • Service Criticality set to High

  Show Answer Answer: 2 Next

• Question 4

  Which one of the following users is automatically added to the Request Assessments list?

  • Any user that adds a worknote to the ticket
  • The analyst assigned to the ticket
  • Any user who has Response Tasks on the incident
  • The Affected User on the incident

  Show Answer Answer: 3 Next

• Question 5

  Which Table would be commonly used for Security Incident Response?

  • Sysapproval_approver
  • Sec_ops_incident
  • Cmdb_rel_ci
  • Sn_si_incident

  Show Answer Answer: 4 Next