100% Free Certified Implementation Specialist CIS-SIR Dumps PDF Demo Cert Guide Cover
PDF Exam Material 2022 Realistic CIS-SIR Dumps Questions
Exam Topics for ServiceNow Certified Implementation Specialist - Security Incident Response Exam
The accompanying will be examined in SERVICENOW CIS-SIR exam dumps:
- Security Incident Response Overview
- Security Incident Automation
- Security Incident Creation and Threat Intelligence
- Risk Calculations and Post Incident Response
NEW QUESTION 22
When a service desk agent uses the Create Security Incident UI action from a regular incident, what occurs?
- A. The service desk agent is redirected to the Security Incident Catalog to complete the record producer
- B. The incident is marked resolved with an automatic security resolution code
- C. A security incident is raised on their behalf and displayed to the service desk agent
- D. A security incident is raised on their behalf but only a notification is displayed
Answer: B
NEW QUESTION 23
Select the one capability that retrieves a list of running processes on a CI from a host or endpoint.
- A. Isolate Host
- B. Publish Watchlist
- C. Get Network Statistics
- D. Get Running Processes
- E. Block Action
- F. Sightings Search
Answer: D
NEW QUESTION 24
When a record is created in the Security Incident Phishing Email table what is triggered to create a Security Incident?
- A. Transform flow
- B. Ingestion Rule
- C. Transform workflow
- D. Duplication Rule
Answer: B
NEW QUESTION 25
In order to see the Actions in Flow Designer for Security Incident, what plugin must be activated?
- A. Performance Analytics for Security Incident Response
- B. Security Spoke
- C. Security Incident Spoke
- D. Security Operations Spoke
Answer: D
NEW QUESTION 26
When the Security Phishing Email record is created what types of observables are stored in the record?
(Choose three.)
- A. IP addresses from the header
- B. Type of Ingestion Rule used to identify this email as a phishing attempt
- C. Who reported the phishing attempt
- D. State of the phishing email
- E. Hashes and/or file names found in the EML attachment
- F. URLs, domains, or IP addresses appearing in the body
Answer: A,E,F
NEW QUESTION 27
What is the purpose of Calculator Groups as opposed to Calculators?
- A. To provide metadata about the calculators
- B. To set the condition for all calculators to run
- C. To allow the agent to select which calculator they want to execute
- D. To ensure one at maximum will run per group
Answer: B
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident- response/reference/setup-assistant-reference.html
NEW QUESTION 28
Security tag used when a piece of information requires support to be effectively acted upon, yet carries risks to privacy, reputation, or operations if shared outside of the organizations involved.
- A. TLP:WHITE
- B. TLP:AMBER
- C. TLP:RED
- D. TLP:GREEN
Answer: B
Explanation:
Explanation
Table Description automatically generated
NEW QUESTION 29
Which one of the following users is automatically added to the Request Assessments list?
- A. Any user that adds a worknote to the ticket
- B. The analyst assigned to the ticket
- C. Any user who has Response Tasks on the incident
- D. The Affected User on the incident
Answer: C
NEW QUESTION 30
Which of the following process definitions allow only single-step progress through the process defined without allowing step skipping?
- A. NIST Stateful
- B. NIST Open
- C. SANS Stateful
- D. SANS Open
Answer: A
NEW QUESTION 31
David is on the Network team and has been assigned a security incident response task.
What role does he need to be able to view and work the task?
- A. Security Basic
- B. Read
- C. External
- D. Security Analyst
Answer: D
NEW QUESTION 32
Which Table would be commonly used for Security Incident Response?
- A. sn_si_incident
- B. sysapproval_approver
- C. cmdb_rel_ci
- D. sec_ops_incident
Answer: A
NEW QUESTION 33
A flow consists of one or more actions and a what?
- A. Catalog Designer
- B. NIST Ready State
- C. Trigger
- D. Change formatter
Answer: C
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/quebec-servicenow-platform/page/administer/flow- designer/concept/flows.html
NEW QUESTION 34
Which improvement opportunity can be found baseline which can contribute towards process maturity and strengthen costumer's overall security posture?
- A. Incident Containment
- B. Post-Incident Review
- C. Fast Eradication
- D. Incident Analysis
Answer: D
NEW QUESTION 35
Knowledge articles that describe steps an analyst needs to follow to complete Security incident tasks might be associated to those tasks through which of the following?
- A. Flow
- B. Flow Designer
- C. Workflow
- D. Work Instruction Playbook
- E. Runbook
Answer: E
NEW QUESTION 36
Which ServiceNow automation capability extends Flow Designer to integrate business processes with other systems?
- A. Orchestration
- B. Integration Hub
- C. Subflows
- D. Workflow
Answer: B
NEW QUESTION 37
What is the fastest way for security incident administrators to remove unwanted widgets from the Security Incident Catalog?
- A. Through the Catalog Definition record
- B. Clicking the X on the top right corner
- C. Talking to the system administrator
- D. Can't be removed
Answer: A
NEW QUESTION 38
Which of the following fields is used to identify an Event that is to be used for Security purposes?
- A. Security
- B. CI
- C. IT
- D. Classification
Answer: D
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/paris-it-operations-management/page/product/event- management/task/t_EMManageEvent.html
NEW QUESTION 39
David is on the Network team and has been assigned a security incident response task. What role does he need to be able to view and work the task?
- A. Security Basic
- B. Read
- C. External
- D. Security Analyst
Answer: D
NEW QUESTION 40
If a desired pre-built integration cannot be found in the platform, what should be your next step to find a certified integration?
- A. Build your own through the REST API Explorer
- B. Look for one in the ServiceNow Store
- C. Ask for assistance in the community page
- D. Download one from ServiceNow Share
Answer: B
NEW QUESTION 41
The Risk Score is calculated by combining all the weights using __________.
- A. a geometric mean
- B. the Risk Score script include
- C. addition
- D. an arithmetic mean
Answer: D
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident- response/reference/setup-assistant-reference.html
NEW QUESTION 42
Which of the following is an action provided by the Security Incident Response application?
- A. Create Response Task set Incident state V1
- B. Look Up Record on Security Incident state V1
- C. Create Record on Security Incident state V1
- D. Create Outage state V1
Answer: B
NEW QUESTION 43
Joe is on the SIR Team and needs to be able to configure Territories and Skills.
What role does he need?
- A. Security Analyst
- B. Security Basic
- C. Manager
- D. Security Admin
Answer: D
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/quebec-security-management/page/product/security- incident-response/reference/installed-with-sir.html
NEW QUESTION 44
......
Updated ServiceNow CIS-SIR Dumps – PDF & Online Engine: https://freetorrent.dumpsmaterials.com/CIS-SIR-real-torrent.html
