CIS-SIR by ServiceNow Actual Free Exam Q&As

Question 1

Which of the following is an action provided by the Security Incident Response application?

A. Create Outage state V1 B. Create Record on Security Incident state V1 C. Create Response Task set Incident state V1 D. Look Up Record on Security Incident state V1

Discussion 0

Correct Answer: D Vote an answer

Question 2

A flow consists of. (Choose two.)

A. Actions B. Scripts C. Triggers D. Processes E. Actors

Discussion 0

Correct Answer: A,C Vote an answer

Question 3

When the Security Phishing Email record is created what types of observables are stored in the record?
(Choose three.)

A. IP addresses from the header B. Who reported the phishing attempt C. Type of Ingestion Rule used to identify this email as a phishing attempt D. State of the phishing email E. URLs, domains, or IP addresses appearing in the body F. Hashes and/or file names found in the EML attachment

Discussion 0

Correct Answer: A,E,F Vote an answer

Question 4

Why should discussions focus with the end in mind?

A. To understand customer's process B. To understand current posture C. To understand required tools D. To understand desired outcomes

Discussion 0

Correct Answer: D Vote an answer

Question 5

If the customer's email server currently has an account setup to report suspicious emails, then what happens next?

A. the ServiceNow platform ensures that parsing and analysis takes place on their mail server B. an integration added to Exchange keeps the ServiceNow platform in sync C. the customer should set up a rule to forward these mails onto the ServiceNow platform D. the customer's systems are already handling suspicious emails

Discussion 0

Correct Answer: C Vote an answer

Question 6

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?

A. Detection & Analysis B. Preparation and Identification C. Containment, Eradication, and Recovery D. Post Incident Activity

Discussion 0

Correct Answer: C Vote an answer

Question 7

What is the purpose of Calculator Groups as opposed to Calculators?

A. To allow the agent to select which calculator they want to execute B. To ensure one at maximum will run per group C. To provide metadata about the calculators D. To set the condition for all calculators to run

Discussion 0

Correct Answer: D Vote an answer

ServiceNow Certified Implementation Specialist - Security Incident Response - CIS-SIR Exam Practice Test