ServiceNow ServiceNow Certifications CIS-VR Questions & Answers

• Question 31:

  After closing the Vulnerable Item (VI), it is recommended to: A. Update the values in the Vulnerability Score Indicator (VSI) based on the critically of the Vulnerability

  B. The VI remains active and in place until the Scanner rescans and closes the VI

  C. Mark the CI as exempt from the Vulnerability if the vulnerability was remediated

  D. Compare the Vulnerability with subsequent scans

  Correct Answer: A

• Question 32:

  This functionality provides a simple way to build criteria once, which can be reused in other platform areas.

  A. Conditions

  B. Favorites

  C. Filter Group

  D. Filters

  Correct Answer: B

• Question 33:

  To facilitate the remediation of a Vulnerable Item what type of item is most commonly used?

  A. Create a Problem

  B. Create a Security Incident

  C. Create a KB article

  D. Create a Change

  Correct Answer: B

• Question 34:

  In order to more easily manage large sets of Vulnerable Items, what should you create?

  A. Vulnerability Groups

  B. Calculator Group

  C. Filter Group

  D. Vulnerable Item Conditions

  Correct Answer: A

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/vuln-change_mgmnt_ovrvw.html

• Question 35:

  In order for Vulnerability admins to configure integrations, they must have the following Role(s):

  A. admin only

  B. sn_vul.admin only

  C. sn_vul.vulnerability_write

  D. admin and sn_vul_qualys.admin

  Correct Answer: B

  Reference: https://docs.servicenow.com/bundle/newyork-security-management/page/product/vulnerabilityresponse/task/install-and-configure-vr.html

• Question 36:

  In ServiceNow, which plugin needs to be added to enable Vulnerability Integration with Qualys, Tenable, or Rapid7?

  A. Vulnerability Response

  B. Trusted Security Circles

  C. Threat Intelligence

  D. Security Incident Response

  Correct Answer: A

  Reference: https://docs.servicenow.com/bundle/orlando-release-notes/page/release-notes/securityoperations/secops-vuln-resp-rn.html

• Question 37:

  Qualys asset tags can be loaded into a table related to the configuration item and used to support business processes or reporting. Set the Qualys Host parameter of asset_tags to a value of __________ to have asset tag information from Qualys be included in the XML payload.

  A. 1

  B. 3

  C. 2

  D. 0

  Correct Answer: C

• Question 38:

  Items in the ServiceNow Store are built and supported by:

  A. An Implementation Partner

  B. The company that created the Application

  C. ServiceNow Professional Services

  D. ServiceNow Technical Support

  Correct Answer: B

• Question 39:

  sn_vul.itsm_popup is the property that is set to True or False based on the customer desire for a popup when creating a Problem or Change record from a Vulnerability or VI record.

  A. True

  B. False

  Correct Answer: B

  Reference: https://docs.servicenow.com/bundle/istanbul-security-management/page/product/vulnerabilityresponse/reference/r_PropVuln.html

• Question 40:

  Which statement about patching is most correct?

  A. Mature organizations abandon patching

  B. Patch management and Vulnerability Response are interchangeable terms

  C. Patching is one of many responses to a Vulnerability

  D. As long as you are patching actively, Vulnerability Response isn't necessary

  Correct Answer: C