ServiceNow CIS-SIR Exam Practice Test Instant Access

Question 1

A pre-planned response process contains which sequence of events?

AOrganize, Analyze, Prioritize, Contain

BOrganize, Detect, Prioritize, Contain

COrganize, Prepare, Prioritize, Contain

DOrganize, Verify, Prioritize, Contain

Answer : A

Question 2

This type of integration workflow helps retrieve a list of active network connections from a host or endpoint, so it can be used to enrich incidents during investigation.

ASecurity Incident Response -- Get Running Services

BSecurity Incident Response -- Get Network Statistics

CSecurity Operations Integration -- Sightings Search

DSecurity Operations Integration -- Block Request

Answer : B

Question 3

The benefits of improved Security Incident Response are expressed .

Aas desirable outcomes with clear, measurable Key Performance Indicators

Bdifferently depending upon 3 stages: Process Improvement, Process Design, and Post Go-Live

Cas a series of states with consistent, clear metrics

Das a value on a scale of 1-10 based on specific outcomes

Answer : C

Question 4

What plugin must be activated to see the New Security Analyst UI?

ASecurity Analyst UI Plugin

BSecurity Incident Response UI plugin

CSecurity Operations UI plugin

DSecurity Agent UI Plugin

Answer : D

Question 5

When the Security Phishing Email record is created what types of observables are stored in the record?

(Choose three.)

AURLs, domains, or IP addresses appearing in the body

BWho reported the phishing attempt

CState of the phishing email

DIP addresses from the header

EHashes and/or file names found in the EML attachment

FType of Ingestion Rule used to identify this email as a phishing attempt

Answer : A, D, E

Question 6

What is the key to a successful implementation?

ASell customer the most expensive package

BImplementing everything that we offer

CUnderstanding the customer's goals and objectives

DBuilding custom integrations

Answer : C

Question 7

Which of the following are potential benefits for utilizing Security Incident assignment automation? (Choose two.)

ADecreased Time to Containment

BIncreased Mean Time to Remediation

CDecreased Time to Ingestion

DIncreased resolution process consistency

Answer : B, D

ServiceNow Certified Implementation Specialist - Security Incident Response Exam Practice Test