ServiceNow CIS-VR Online Practice Questions and Exam Preparation

ServiceNow CIS-VR Online Questions & Answers

• Question 41:

  What type of data would the CIO/CISO want on the dashboard?

  A. Aggregations for priority and workload
  B. Drill-down to granularity
  C. Single, clear indicators of organizational health
  D. Up to the minute views
  C. Single, clear indicators of organizational health

• Question 42:

  This functionality provides a simple way to build criteria once, which can be reused in other platform areas.

  A. Conditions
  B. Favorites
  C. Filter Group
  D. Filters
  B. Favorites

• Question 43:

  What role is required to view the Vulnerability Overview Dashboard?

  A. sn_vul.vulnerability.read
  B. sn_vul.manager
  C. sn_vul.ciso
  D. sn_vul.vulnerability.write
  D. sn_vul.vulnerability.write

• Question 44:

  After closing the Vulnerable Item (VI), it is recommended to:

  A. Update the values in the Vulnerability Score Indicator (VSI) based on the critically of the Vulnerability
  B. The VI remains active and in place until the Scanner rescans and closes the VI
  C. Mark the CI as exempt from the Vulnerability if the vulnerability was remediated
  D. Compare the Vulnerability with subsequent scans
  A. Update the values in the Vulnerability Score Indicator (VSI) based on the critically of the Vulnerability

• Question 45:

  Which module within the Vulnerability Response application could be used to get information from the National Vulnerability Database (NVD) at any moment?

  A. On-Demand Update
  B. NVD Auto-Update
  C. Vulnerable Software
  D. NVD Patch
  B. NVD Auto-Update

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/c_NVDAndCWEDataImport.html#c_NVDAndCWEDataImport

• Question 46:

  If a customer expects to ingest 2 million vulnerabilities during its initial load, which instance size should you recommend?

  B. XL
  C. XXL
  D. Ultra
  C. XXL

• Question 47:

  What is the best way to develop a complete list of Vulnerability Reports?

  A. Recommend that the client purchase the full Performance Analytics package
  B. Ask the CISO
  C. Work with the customer to identify the things that will be most useful to them
  D. Use the standard out of the box reports only
  C. Work with the customer to identify the things that will be most useful to them

• Question 48:

  Where can you find information related to the Common Vulnerabilities and Exposures (CVE)?

  A. Tenable
  B. MITRE
  C. NIST
  D. Qualys
  C. NIST

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/c_VulnerabilityResponse.html

• Question 49:

  In order for Vulnerability admins to configure integrations, they must have the following Role(s):

  A. admin only
  B. sn_vul.admin only
  C. sn_vul.vulnerability_write
  D. admin and sn_vul_qualys.admin
  B. sn_vul.admin only

  ---

  Reference: https://docs.servicenow.com/bundle/newyork-security-management/page/product/vulnerability-response/task/install-and-configure-vr.html

• Question 50:

  In order to more easily manage large sets of Vulnerable Items, what should you create?

  A. Vulnerability Groups
  B. Calculator Group
  C. Filter Group
  D. Vulnerable Item Conditions
  A. Vulnerability Groups

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/vuln-change_mgmnt_ovrvw.html