ServiceNow CIS-VR Online Practice Questions and Exam Preparation

ServiceNow CIS-VR Online Questions & Answers

• Question 1:

  In regard to the Security Operations Process, which of the following statements defines the "Identify" phase?

  A. What processes and assets need protection?
  B. What techniques can identify incidents?
  C. What safeguards are available?
  D. What techniques can restore capabilities?
  E. What techniques can contain impacts of incidents?
  C. What safeguards are available?

• Question 2:

  What Business Rule creates a Configuration Item from a Vulnerable Item record?

  A. Create CI from Vulnerable Group Details
  B. Create CI from Closed Item Details
  C. Determine CI from Network Details
  D. Create CI from Vulnerable Item Details
  D. Create CI from Vulnerable Item Details

• Question 3:

  Managers should have access to which role-based data access and visualizations? (Choose three.)

  A. Aggregations for priority and workload
  B. Time period views
  C. Up-to-the-minute views
  D. Drill-down to granularity
  B. Time period views
  C. Up-to-the-minute views
  D. Drill-down to granularity

• Question 4:

  Some customers may have a clearly-defined, well-documented vulnerability exception process and some may even provide a diagram illustrating that process.

  What is the main advantage of having this documentation when translating it into a Flow or Workflow?

  A. Perfect opportunity for process improvement
  B. Understand their internal process
  C. Build the Flow/Workflow directly into the platform
  D. No advantage
  B. Understand their internal process

• Question 5:

  Where in the platform can you create Filter Groups?

  A. Vulnerability > Administration > Filter Groups
  B. Vulnerability > Groups > Filter Groups
  C. Security Operations > Administration > Filter Groups
  D. Security Operations > Groups > Filter Groups
  C. Security Operations > Administration > Filter Groups

• Question 6:

  Which of the following provides a list of software weaknesses?

  A. Third Party Entries
  B. NVD
  C. CWE
  D. Vulnerable Items
  C. CWE

  ---

  Reference: https://docs.servicenow.com/bundle/newyork-security-management/page/product/vulnerability-response/task/view-vuln-libraries.html

• Question 7:

  Which one of the following record types can be considered the intersection of Vulnerability source information and CMDB CI records?

  A. Vulnerability
  B. Vulnerability Task
  C. CMDB_CI_Vuln
  D. Vulnerable Item (VI)
  D. Vulnerable Item (VI)

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/reference/vulnerable-item-fields.html

• Question 8:

  What do Vulnerability Exceptions require?

  A. An Approval by default
  B. An Exception Workflow
  C. A GRC integration
  D. A Filter Group
  C. A GRC integration

  ---

  Reference: https://community.servicenow.com/community?id=community_questionandsys_id=f3d5ca2b1bc34890ada243f6fe4bcb4b

• Question 9:

  In ServiceNow, which plugin needs to be added to enable Vulnerability Integration with Qualys, Tenable, or Rapid7?

  A. Vulnerability Response
  B. Trusted Security Circles
  C. Threat Intelligence
  D. Security Incident Response
  A. Vulnerability Response

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-release-notes/page/release-notes/security-operations/secops-vuln-resp-rn.html

• Question 10:

  Select the three components of a Filter Condition: (Choose three.)

  A. Field
  B. Sum
  C. Operator
  D. Value
  A. Field
  C. Operator
  D. Value

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-platform-user-interface/page/use/common-ui-elements/concept/c_ConditionBuilder.html