ServiceNow ServiceNow Certifications CIS-VR Questions & Answers

• Question 21:

  What option can be used to close out a Vulnerable Item Record or initiate the Exception Process?

  A. Complete

  B. Update

  C. Close/Defer

  D. Save

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/vulnerabillity-states.html

• Question 22:

  When an approval is rejected for a Vulnerable Item exception, what happens to the State field for that record?

  A. It reverts to `Analysis'

  B. It is set to `New'

  C. It is set to `In Review'

  D. It will be set back to its previous value

  Correct Answer: C

• Question 23:

  Some customers may have a clearly-defined, well-documented vulnerability exception process and some may even provide a diagram illustrating that process.

  What is the main advantage of having this documentation when translating it into a Flow or Workflow?

  A. Perfect opportunity for process improvement

  B. Understand their internal process

  C. Build the Flow/Workflow directly into the platform

  D. No advantage

  Correct Answer: B

• Question 24:

  Approvals within the Vulnerability Application are created based on:

  A. The sys_approval and the sn_vul_vulnerable_item tables

  B. The sn_vul_vulnerable_item and sn_vul_vulnerability tables

  C. The sn_vul_change_approval table

  D. The sys_approval table

  Correct Answer: C

  Reference: https://community.servicenow.com/community? id=community_questionandsys_id=ea57a122db1edb8058dcf4621f961983

• Question 25:

  Best Practices dictate that when creating a Change task from a Vulnerable Item, which of the following fields should be used for assigning the Assigned To field on the Change task?

  A. Assigned To on Vulnerable Item

  B. Managed By on CMDB_CI

  C. Assigned To on CMDB_CI Record

  D. Best Practice does not dictate a specific field

  Correct Answer: A

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/reference/vulnerable-item-fields.html

• Question 26:

  What do Vulnerability Exceptions require?

  A. An Approval by default

  B. An Exception Workflow

  C. A GRC integration

  D. A Filter Group

  Correct Answer: C

  Reference: https://community.servicenow.com/community? id=community_questionandsys_id=f3d5ca2b1bc34890ada243f6fe4bcb4b

• Question 27:

  Ignoring a Vulnerable Item:

  A. Permanently removes the item from the list of Active Vulnerable Items

  B. Move the item to the Slushbucket

  C. Has no impact on the list of Active Vulnerable Items

  D. Temporarily removes the item from the list of Active Vulnerable Items

  Correct Answer: A

• Question 28:

  Which application provides the opportunity to align security events with organizational controls, automatically appraising other business functions of potential impact?

  A. Performance Analytics

  B. Event Management

  C. Governance, Risk, and Compliance

  D. Service Mapping

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-governance-risk-compliance/page/product/grccommon/reference/grc-terms.html

• Question 29:

  Which Vulnerability maturity level provides advanced owner assignment?

  A. Enterprise risk trending

  B. Automated prioritization

  C. Manual operations

  D. Improved remediation

  Correct Answer: D

  

  Reference: https://www.inry.com/security-and-risk/vulnerability-management

• Question 30:

  Vulnerability Response is a scoped application; which prefix is attached to all items related to the application?

  A. cmn_vul

  B. vul

  C. sn_vul

  D. x_vul

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/vr_view_detection.html