ServiceNow ServiceNow Certifications CIS-VR Questions & Answers

• Question 11:

  A common integration point with Vulnerability is:

  A. Workflow Mappings

  B. Risk Indicators within GRC

  C. Service Catalog

  D. Knowledge Base

  Correct Answer: B

• Question 12:

  If fixing a Vulnerable Item outweighs the benefits, the correct course of action is:

  A. Mark the CI inactive in the CMDB and notify the CI owner

  B. Record the accepted risk and Close/Defer the Vulnerable Item

  C. Deprioritize the Vulnerable Item Records (VIT) to push them further down the list so it can be ignored

  D. Add the CI to the Vulnerability Scanner's exclusions Related List

  Correct Answer: B

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/c_IndivVulnItemMgmt.html

• Question 13:

  Filter Groups can be used in Vulnerability Response to group what type of vulnerability records?

  A. Vulnerability groups

  B. Third Party Entries

  C. Vulnerable Items

  D. Vulnerable Software

  Correct Answer: C

  Reference https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/vulnerability-groups.html

• Question 14:

  Which of the following can NOT be used for building Vulnerability Groups?

  A. Vulnerability

  B. Filter Groups

  C. Condition Builder

  D. Advanced Scripts

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/vulnerability-groups.html

• Question 15:

  Where in the platform can you create Filter Groups?

  A. Vulnerability > Administration > Filter Groups

  B. Vulnerability > Groups > Filter Groups

  C. Security Operations > Administration > Filter Groups

  D. Security Operations > Groups > Filter Groups

  Correct Answer: C

• Question 16:

  What system property allows for the auto creation of Vulnerability Groups based on the Vulnerable Item's Vulnerability?

  A. sn_vul.autocreate_vul_filter_group

  B. sn_vul.autocreate_vul_approval_group

  C. sn_vul.autocreate_vul_group_item

  D. sn_vul.autocreate_vul_centric_group

  Correct Answer: C

• Question 17:

  In order to more easily manage large sets of Vulnerable Items, you would want to create:

  A. Vulnerability Groups

  B. Script Includes

  C. Filter Groups

  D. Vulnerability Sets

  Correct Answer: A

  Reference: https://docs.servicenow.com/bundle/kingston-release-notes/page/release-notes/securityoperations/secops-vuln-resp-rn.html

• Question 18:

  Which of the following is the property that controls whether Vulnerability Groups are created by default based on Vulnerabilities in the system?

  A. sn_vul.autocreate_vul_centric_group

  B. sn_vul.autocreate_groups

  C. sn_vul.autocreate_vul_grouping

  D. sn_vul.create_default_vul_groups

  Correct Answer: A

• Question 19:

  Which of the following best describes a Vulnerability Group?

  A. Groups VIs using a Filter against Vulnerable Item Fields

  B. A Filter defining a sub-set of CIs to be treated as a group

  C. The User Group assigned to resolving the Vulnerable Item

  D. Must have a corresponding filter group

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/vulnerability-groups.html

• Question 20:

  What must Vulnerability Exceptions be supplied by default?

  A. A reason for the exception

  B. Integrations with GRC to handle the exception

  C. Requirement Actions for the exception

  D. A manual approval authority for the exception

  Correct Answer: C