ServiceNow CIS-SIR Online Practice Questions and Exam Preparation

ServiceNow CIS-SIR Online Questions & Answers

• Question 1:

  There are several methods in which security incidents can be raised, which broadly fit into one of these categories:. (Choose two.)

  A. Integrations
  B. Manually created
  C. Automatically created
  D. Email parsing
  B. Manually created
  C. Automatically created

• Question 2:

  Joe is on the SIR Team and needs to be able to configure Territories and Skills. What role does he need?

  A. Security Basic
  B. Manager
  C. Security Analyst
  D. Security Admin
  D. Security Admin

• Question 3:

  What makes a playbook appear for a Security Incident if using Flow Designer?

  A. Actions defined to create tasks
  B. Trigger set to conditions that match the security incident
  C. Runbook property set to true
  D. Service Criticality set to High
  B. Trigger set to conditions that match the security incident

• Question 4:

  Security tag used when a piece of information requires support to be effectively acted upon, yet carries risks to privacy, reputation, or operations if shared outside of the organizations involved.

  A. TLP:GREEN
  B. TLP:AMBER
  C. TLP:RED
  D. TLP:WHITE
  B. TLP:AMBER

• Question 5:

  Flow Triggers can be based on what? (Choose three.)

  A. Record changes
  B. Schedules
  C. Subflows
  D. Record inserts
  E. Record views
  A. Record changes
  B. Schedules
  C. Subflows

• Question 6:

  A flow consists of one or more actions and a what?

  A. Change formatter
  B. Catalog Designer
  C. NIST Ready State
  D. Trigger
  D. Trigger

• Question 7:

  What factor, if any, limits the ability to close SIR records?

  A. Opened related INC records
  B. Best practice dictates that SIR records should be set to 'Resolved' never to 'Closed'
  C. Nothing, SIR records could be closed at any time
  D. All post-incident review QUESTION NO:ers have to be completed first
  A. Opened related INC records

• Question 8:

  What specific role is required in order to use the REST API Explorer?

  A. admin
  B. sn_si.admin
  C. rest_api_explorer
  D. security_admin
  A. admin
  C. rest_api_explorer

• Question 9:

  What is the first step when creating a security Playbook?

  A. Set the Response Task's state
  B. Create a Flow
  C. Create a Runbook
  D. Create a Knowledge Article
  B. Create a Flow

• Question 10:

  Which of the following fields is used to identify an Event that is to be used for Security purposes?

  A. IT
  B. Classification
  C. Security
  D. CI
  B. Classification