ServiceNow CIS-VR Online Practice Questions and Exam Preparation

ServiceNow CIS-VR Online Questions & Answers

• Question 31:

  Qualys asset tags can be loaded into a table related to the configuration item and used to support business processes or reporting. Set the Qualys Host parameter of asset_tags to a value of __________ to have asset tag information from Qualys be included in the XML payload.

  A. 1
  B. 3
  C. 2
  C. 2

• Question 32:

  Approvals within the Vulnerability Application are created based on:

  A. The sys_approval and the sn_vul_vulnerable_item tables
  B. The sn_vul_vulnerable_item and sn_vul_vulnerability tables
  C. The sn_vul_change_approval table
  D. The sys_approval table
  C. The sn_vul_change_approval table

  ---

  Reference: https://community.servicenow.com/community?id=community_questionandsys_id=ea57a122db1edb8058dcf4621f961983

• Question 33:

  Items in the ServiceNow Store are built and supported by:

  A. An Implementation Partner
  B. The company that created the Application
  C. ServiceNow Professional Services
  D. ServiceNow Technical Support
  B. The company that created the Application

• Question 34:

  When an approval is rejected for a Vulnerable Item exception, what happens to the State field for that record?

  A. It reverts to `Analysis'
  B. It is set to `New'
  C. It is set to `In Review'
  D. It will be set back to its previous value
  C. It is set to `In Review'

• Question 35:

  Which of the following best describes a Vulnerability Group?

  A. Groups VIs using a Filter against Vulnerable Item Fields
  B. A Filter defining a sub-set of CIs to be treated as a group
  C. The User Group assigned to resolving the Vulnerable Item
  D. Must have a corresponding filter group
  D. Must have a corresponding filter group

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/vulnerability-groups.html

• Question 36:

  Vulnerability Response can be best categorized as a ____________, focused on identifying and remediating vulnerabilities as early as possible.

  A. A proactive process
  B. An iterative process
  C. A tentative process
  D. A reactive process
  A. A proactive process

• Question 37:

  What is the ID associated with the Vulnerability Response plugin?

  A. com.snc.threat.intelligence
  B. com.snc.vulnerability
  C. com.snc.threat.feeds
  D. com.snc.security_incident
  B. com.snc.vulnerability

• Question 38:

  SLAs are used to ensure VUL are processed in a timely matter. Which field is used to determine the expected timeframe for remediating a VIT?

  A. Updated
  B. Remediation status
  C. Remediation target
  D. Closed
  C. Remediation target

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/time-to-remediate-rules.html

• Question 39:

  What must Vulnerability Exceptions be supplied by default?

  A. A reason for the exception
  B. Integrations with GRC to handle the exception
  C. Requirement Actions for the exception
  D. A manual approval authority for the exception
  C. Requirement Actions for the exception

• Question 40:

  A common integration point with Vulnerability is:

  A. Workflow Mappings
  B. Risk Indicators within GRC
  C. Service Catalog
  D. Knowledge Base
  B. Risk Indicators within GRC