ServiceNow CIS-VR Online Practice Questions and Exam Preparation

ServiceNow CIS-VR Online Questions & Answers

• Question 11:

  In order to more easily manage large sets of Vulnerable Items, you would want to create:

  A. Vulnerability Groups
  B. Script Includes
  C. Filter Groups
  D. Vulnerability Sets
  A. Vulnerability Groups

  ---

  Reference: https://docs.servicenow.com/bundle/kingston-release-notes/page/release-notes/security-operations/secops-vuln-resp-rn.html

• Question 12:

  Which application provides the opportunity to align security events with organizational controls, automatically appraising other business functions of potential impact?

  A. Performance Analytics
  B. Event Management
  C. Governance, Risk, and Compliance
  D. Service Mapping
  C. Governance, Risk, and Compliance

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grc-common/reference/grc-terms.html

• Question 13:

  What system property allows for the auto creation of Vulnerability Groups based on the Vulnerable Item's Vulnerability?

  A. sn_vul.autocreate_vul_filter_group
  B. sn_vul.autocreate_vul_approval_group
  C. sn_vul.autocreate_vul_group_item
  D. sn_vul.autocreate_vul_centric_group
  C. sn_vul.autocreate_vul_group_item

• Question 14:

  To get useful reporting regarding the most vulnerable CI's, which statement applies?

  A. You must purchase a separate PA module
  B. Your CI population must be huge
  C. You must have good KPI's defined
  D. Your CMDB must be up to date and useful
  D. Your CMDB must be up to date and useful

• Question 15:

  To facilitate the remediation of a Vulnerable Item what type of item is most commonly used?

  A. Create a Problem
  B. Create a Security Incident
  C. Create a KB article
  D. Create a Change
  B. Create a Security Incident

• Question 16:

  Filter Groups provide a way to:

  A. Decouple the use of the grouping from the definition of the grouping
  B. Build criteria once
  C. Reuse criteria in a variety of places
  D. All of the above
  B. Build criteria once

• Question 17:

  The Vulnerability Admin role (sn_vul.admin) can modify Vulnerability Application Properties and can be delegated to the following role(s):

  A. ServiceNow Security Operations Admin (sn_sec.admin)
  B. Security Admin (security.admin)
  C. Vulnerability Response Admin (sn_vul_resp.admin)
  D. All of the above
  E. None of the above
  A. ServiceNow Security Operations Admin (sn_sec.admin)

• Question 18:

  Which statement about patching is most correct?

  A. Mature organizations abandon patching
  B. Patch management and Vulnerability Response are interchangeable terms
  C. Patching is one of many responses to a Vulnerability
  D. As long as you are patching actively, Vulnerability Response isn't necessary
  C. Patching is one of many responses to a Vulnerability

• Question 19:

  Which of the following best describes the Vulnerable Item State Approval Workflow?

  A. It is read-only, you can only change the Assignment Group members for the approval
  B. It exists in the Security Operations Common scope so it can be modified by any Security Operations Admin
  C. It can only be modified by System Administrators
  D. It runs against the [sn_vul_change_approval] table
  D. It runs against the [sn_vul_change_approval] table

  ---

  Reference: https://community.servicenow.com/community?id=community_questionandsys_id=ea57a122db1edb8058dcf4621f961983

• Question 20:

  Vulnerability Response is a scoped application; which prefix is attached to all items related to the application?

  A. cmn_vul
  B. vul
  C. sn_vul
  D. x_vul
  C. sn_vul

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/vr_view_detection.html