ServiceNow ServiceNow Certifications CIS-VR Questions & Answers

• Question 51:

  If a customer expects to ingest 2 million vulnerabilities during its initial load, which instance size should you recommend?

  A. L

  B. XL

  C. XXL

  D. Ultra

  Correct Answer: C

• Question 52:

  Vulnerability Response can be best categorized as a ____________, focused on identifying and remediating vulnerabilities as early as possible.

  A. A proactive process

  B. An iterative process

  C. A tentative process

  D. A reactive process

  Correct Answer: A

• Question 53:

  A list of software weaknesses is known as:

  A. National Vulnerability Database (NVD)

  B. Common Vulnerability and Exposure (CVE)

  C. National Institute of Science and Technology (NIST)

  D. Common Weaknesses Enumeration (CWE)

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability

  response/concept/c_VulnerabilityResponse.html

• Question 54:

  Which module is used to adjust the frequency in which CVEs are updated?

  A. NVD Auto-update

  B. Update

  C. CVE Auto-update

  D. On-demand update

  Correct Answer: B

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/c_NVDAndCWEDataImport.html

• Question 55:

  In regard to the Security Operations Process, which of the following statements defines the "Identify" phase?

  A. What processes and assets need protection?

  B. What techniques can identify incidents?

  C. What safeguards are available?

  D. What techniques can restore capabilities?

  E. What techniques can contain impacts of incidents?

  Correct Answer: C

• Question 56:

  ServiceNow Vulnerability Response tables typically start with which prefix?

  A. snvr_

  B. snvuln_

  C. vul_

  D. sn_vul_

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/jakarta-security-management/page/product/vulnerabilityresponse/reference/r_TblVnlnlMgmt.html

• Question 57:

  Changes made within a named Update Set in a different application scope:

  A. Will be captured

  B. Will throw errors

  C. Will not be captured

  D. Will be partially captured

  Correct Answer: A

• Question 58:

  What is the minimum role required to create and change Service Level Agreements for Vulnerability Response groups?

  A. sla_manager

  B. admin

  C. sn_vul.vulnerability_write

  D. sn_vul.admin

  Correct Answer: D

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/task/t_CreateVulnSLA.html

• Question 59:

  SLAs are used to ensure VUL are processed in a timely matter. Which field is used to determine the expected timeframe for remediating a VIT?

  A. Updated

  B. Remediation status

  C. Remediation target

  D. Closed

  Correct Answer: C

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerabilityresponse/concept/time-to-remediate-rules.html

• Question 60:

  Select the three components of a Filter Condition: (Choose three.)

  A. Field

  B. Sum

  C. Operator

  D. Value

  Correct Answer: ACD

  Reference: https://docs.servicenow.com/bundle/orlando-platform-user-interface/page/use/common-uielements/concept/c_ConditionBuilder.html