ServiceNow ServiceNow Certifications CIS-VR Questions & Answers

• Question 41:

  The Vulnerability Admin role (sn_vul.admin) can modify Vulnerability Application Properties and can be delegated to the following role(s):

  A. ServiceNow Security Operations Admin (sn_sec.admin)

  B. Security Admin (security.admin)

  C. Vulnerability Response Admin (sn_vul_resp.admin)

  D. All of the above E. None of the above

  Correct Answer: A

• Question 42:

  Which module within the Vulnerability Response application could be used to get information from the National Vulnerability Database (NVD) at any moment?

  A. On-Demand Update

  B. NVD Auto-Update

  C. Vulnerable Software

  D. NVD Patch

  Correct Answer: B

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/c_NVDAndCWEDataImport.html#c_NVDAndCWEDataImport

• Question 43:

  Which of the following provides a list of software weaknesses?

  A. Third Party Entries

  B. NVD

  C. CWE

  D. Vulnerable Items

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/newyork-security-management/page/product/vulnerabilityresponse/task/view-vuln-libraries.html

• Question 44:

  Filter Groups provide a way to:

  A. Decouple the use of the grouping from the definition of the grouping

  B. Build criteria once

  C. Reuse criteria in a variety of places

  D. All of the above

  Correct Answer: B

• Question 45:

  Which one of the following record types can be considered the intersection of Vulnerability source information and CMDB CI records?

  A. Vulnerability

  B. Vulnerability Task

  C. CMDB_CI_Vuln

  D. Vulnerable Item (VI)

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/reference/vulnerable-item-fields.html

• Question 46:

  Where can you find information related to the Common Vulnerabilities and Exposures (CVE)?

  A. Tenable

  B. MITRE

  C. NIST

  D. Qualys

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/c_VulnerabilityResponse.html

• Question 47:

  What is the ID associated with the Vulnerability Response plugin?

  A. com.snc.threat.intelligence

  B. com.snc.vulnerability

  C. com.snc.threat.feeds

  D. com.snc.security_incident

  Correct Answer: B

• Question 48:

  What is the purpose of Scoped Applications?

  A. Suppliers can only charge for applications when they are scoped

  B. Scoped applications are scalable, Global applications are not

  C. Scoping encapsulates and protects data and functionality

  D. An application needs to be scoped in order to be deployed as a plugin

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-application-development/page/build/applications/ concept/c_ApplicationScope.html

• Question 49:

  The components installed with Vulnerability Response include:

  A. Tables, Scheduled Jobs, Security Operations Common

  B. Business Rules, Roles, Workflows

  C. Properties, Client Scripts, Wizards

  D. UI Pages, Business Rules, Vulnerability Scanners

  Correct Answer: A

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/reference/installed-with-vr.html

• Question 50:

  What Business Rule creates a Configuration Item from a Vulnerable Item record?

  A. Create CI from Vulnerable Group Details

  B. Create CI from Closed Item Details

  C. Determine CI from Network Details

  D. Create CI from Vulnerable Item Details

  Correct Answer: D