ServiceNow CIS-SIR Exam Questions Instant Access

Question 1

The severity field of the security incident is influenced by what?

AThe cost of the response to the security breach

BThe impact, urgency and priority of the incident

CThe time taken to resolve the security incident

DThe business value of the affected asset

Answer : D

Question 2

What is the name of the Inbound Action that validates whether an inbound email should be processed as a phishing email for URP v2?

AUser Reporting Phishing (for Forwarded emails)

BScan email for threats

CUser Reporting Phishing (for New emails)

DCreate Phishing Email

Answer : A

Question 3

There are several methods in which security incidents can be raised, which broadly fit into one of these categories: . (Choose two.)

AIntegrations

BManually created

CAutomatically created

DEmail parsing

Answer : B, C

Question 4

Knowledge articles that describe steps an analyst needs to follow to complete Security incident tasks might be associated to those tasks through which of the following?

AWork Instruction Playbook

BFlow

CWorkflow

DRunbook

EFlow Designer

Answer : D

Question 5

A flow consists of . (Choose two.)

AScripts

BActions

CProcesses

DActors

ETriggers

Answer : B, E

Question 6

What is the first step when creating a security Playbook?

ASet the Response Task's state

BCreate a Flow

CCreate a Runbook

DCreate a Knowledge Article

Answer : B

Question 7

Which Table would be commonly used for Security Incident Response?

Asysapproval_approver

Bsec_ops_incident

Ccmdb_rel_ci

Dsn_si_incident

Answer : D

ServiceNow Certified Implementation Specialist - Security Incident Response CIS-SIR Exam Questions