ServiceNow CIS-SIR Exam Practice Test Instant Access

Question 1

What does a flow require?

ASecurity orchestration flows

BRunbooks

CCAB orders

DA trigger

Answer : D

Question 2

What is the name of the Inbound Action that validates whether an inbound email should be processed as a phishing email for URP v2?

AUser Reporting Phishing (for Forwarded emails)

BScan email for threats

CUser Reporting Phishing (for New emails)

DCreate Phishing Email

Answer : A

Question 3

Joe is on the SIR Team and needs to be able to configure Territories and Skills. What role does he need?

ASecurity Basic

BManager

CSecurity Analyst

DSecurity Admin

Answer : D

Question 4

What makes a playbook appear for a Security Incident if using Flow Designer?

AActions defined to create tasks

BTrigger set to conditions that match the security incident

CRunbook property set to true

DService Criticality set to High

Answer : B

Question 5

Which one of the following users is automatically added to the Request Assessments list?

AAny user that adds a worknote to the ticket

BThe analyst assigned to the ticket

CAny user who has Response Tasks on the incident

DThe Affected User on the incident

Answer : C

Question 6

When a record is created in the Security Incident Phishing Email table what is triggered to create a Security Incident?

AIngestion Rule

BTransform flow

CTransform workflow

DDuplication Rule

Answer : A

Question 7

What is the purpose of Calculator Groups as opposed to Calculators?

ATo provide metadata about the calculators

BTo allow the agent to select which calculator they want to execute

CTo set the condition for all calculators to run

DTo ensure one at maximum will run per group

Answer : C

ServiceNow Certified Implementation Specialist - Security Incident Response CIS-SIR Exam Practice Test