ServiceNow CIS-VR Online Practice Questions and Exam Preparation

ServiceNow CIS-VR Online Questions & Answers

• Question 1:

  What is the best way to develop a complete list of Vulnerability Reports?

  A. Recommend that the client purchase the full Performance Analytics package
  B. Ask the CISO
  C. Work with the customer to identify the things that will be most useful to them
  D. Use the standard out of the box reports only
  C. Work with the customer to identify the things that will be most useful to them

• Question 2:

  The three levels of users you will likely encounter that will need access to data displayed in the Vulnerability Response dashboard are: (Choose three.)

  A. Security Analysts
  B. Customers
  C. CIO/CISO
  D. Fulfillers
  A. Security Analysts
  B. Customers
  C. CIO/CISO

• Question 3:

  What type of data would the CIO/CISO want on the dashboard?

  A. Aggregations for priority and workload
  B. Drill-down to granularity
  C. Single, clear indicators of organizational health
  D. Up to the minute views
  C. Single, clear indicators of organizational health

• Question 4:

  To get useful reporting regarding the most vulnerable CI's, which statement applies?

  A. You must purchase a separate PA module
  B. Your CI population must be huge
  C. You must have good KPI's defined
  D. Your CMDB must be up to date and useful
  D. Your CMDB must be up to date and useful

• Question 5:

  Managers should have access to which role-based data access and visualizations? (Choose three.)

  A. Aggregations for priority and workload
  B. Time period views
  C. Up-to-the-minute views
  D. Drill-down to granularity
  B. Time period views
  C. Up-to-the-minute views
  D. Drill-down to granularity

• Question 6:

  What role is required to view the Vulnerability Overview Dashboard?

  A. sn_vul.vulnerability.read
  B. sn_vul.manager
  C. sn_vul.ciso
  D. sn_vul.vulnerability.write
  D. sn_vul.vulnerability.write

• Question 7:

  To ensure that Vulnerabilities are processed correctly, you can define a Service Level Agreement (SLA) for Vulnerability Response. To achieve this, you would:

  A. Create a custom workflow to monitor the time between States
  B. Log in as a system admin, and using the globally scoped baseline SLA Modules
  C. Have the role of Vulnerability admin, but only in the Vulnerability Scope
  D. Make sure you have at least the sn_vul.vulnerability_write role and using the baseline SLA Application Modules
  D. Make sure you have at least the sn_vul.vulnerability_write role and using the baseline SLA Application Modules

  ---

  explanation:

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/task/t_CreateVulnSLA.html

• Question 8:

  Which of the following best describes the Vulnerable Item State Approval Workflow?

  A. It is read-only, you can only change the Assignment Group members for the approval
  B. It exists in the Security Operations Common scope so it can be modified by any Security Operations Admin
  C. It can only be modified by System Administrators
  D. It runs against the [sn_vul_change_approval] table
  D. It runs against the [sn_vul_change_approval] table

  ---

  explanation:

  Reference: https://community.servicenow.com/community?id=community_questionandsys_id=ea57a122db1edb8058dcf4621f961983

• Question 9:

  What is the ServiceNow application used for process automation?

  A. Knowledge Base
  B. Workflows
  C. SLAs
  D. Service Catalog
  B. Workflows

  ---

  explanation:

  Reference: https://www.servicenow.com/products/workflow.html

• Question 10:

  Which of the following is a common integration point between Vulnerability and GRC?

  A. Security Incident Response
  B. Change
  C. Problem
  D. Risk Indicators
  A. Security Incident Response

  ---

  explanation:

  Reference: https://community.servicenow.com/community?id=community_questionandsys_id=84e0700fdb30bfc8fece0b55ca96190f