ServiceNow CIS-VR Online Practice Questions and Exam Preparation

ServiceNow CIS-VR Online Questions & Answers

• Question 51:

  If fixing a Vulnerable Item outweighs the benefits, the correct course of action is:

  A. Mark the CI inactive in the CMDB and notify the CI owner
  B. Record the accepted risk and Close/Defer the Vulnerable Item
  C. Deprioritize the Vulnerable Item Records (VIT) to push them further down the list so it can be ignored
  D. Add the CI to the Vulnerability Scanner's exclusions Related List
  B. Record the accepted risk and Close/Defer the Vulnerable Item

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/c_IndivVulnItemMgmt.html

• Question 52:

  What is the minimum role required to create and change Service Level Agreements for Vulnerability Response groups?

  A. sla_manager
  B. admin
  C. sn_vul.vulnerability_write
  D. sn_vul.admin
  D. sn_vul.admin

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/task/t_CreateVulnSLA.html

• Question 53:

  Which of the following is a common integration point between Vulnerability and GRC?

  A. Security Incident Response
  B. Change
  C. Problem
  D. Risk Indicators
  A. Security Incident Response

  ---

  Reference: https://community.servicenow.com/community?id=community_questionandsys_id=84e0700fdb30bfc8fece0b55ca96190f

• Question 54:

  What option can be used to close out a Vulnerable Item Record or initiate the Exception Process?

  A. Complete
  B. Update
  C. Close/Defer
  D. Save
  C. Close/Defer

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/vulnerabillity-states.html

• Question 55:

  Which of the following is the property that controls whether Vulnerability Groups are created by default based on Vulnerabilities in the system?

  A. sn_vul.autocreate_vul_centric_group
  B. sn_vul.autocreate_groups
  C. sn_vul.autocreate_vul_grouping
  D. sn_vul.create_default_vul_groups
  A. sn_vul.autocreate_vul_centric_group

• Question 56:

  Which module is used to adjust the frequency in which CVEs are updated?

  A. NVD Auto-update
  B. Update
  C. CVE Auto-update
  D. On-demand update
  B. Update

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/c_NVDAndCWEDataImport.html

• Question 57:

  The components installed with Vulnerability Response include:

  A. Tables, Scheduled Jobs, Security Operations Common
  B. Business Rules, Roles, Workflows
  C. Properties, Client Scripts, Wizards
  D. UI Pages, Business Rules, Vulnerability Scanners
  A. Tables, Scheduled Jobs, Security Operations Common

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/reference/installed-with-vr.html

• Question 58:

  Which of the following can NOT be used for building Vulnerability Groups?

  A. Vulnerability
  B. Filter Groups
  C. Condition Builder
  D. Advanced Scripts
  D. Advanced Scripts

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/vulnerability-groups.html

• Question 59:

  The three levels of users you will likely encounter that will need access to data displayed in the Vulnerability Response dashboard are: (Choose three.)

  A. Security Analysts
  B. Customers
  C. CIO/CISO
  D. Fulfillers
  A. Security Analysts
  B. Customers
  C. CIO/CISO

• Question 60:

  Best Practices dictate that when creating a Change task from a Vulnerable Item, which of the following fields should be used for assigning the Assigned To field on the Change task?

  A. Assigned To on Vulnerable Item
  B. Managed By on CMDB_CI
  C. Assigned To on CMDB_CI Record
  D. Best Practice does not dictate a specific field
  A. Assigned To on Vulnerable Item

  ---

  Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/reference/vulnerable-item-fields.html