Black Friday Special Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: mxmas70

Home > ServiceNow > CIS-Security Incident Response > CIS-SIR

CIS-SIR Certified Implementation Specialist - Security Incident Response Exam Question and Answers

Question # 4

What is the purpose of Calculator Groups as opposed to Calculators?

A.

To provide metadata about the calculators

B.

To allow the agent to select which calculator they want to execute

C.

To set the condition for all calculators to run

D.

To ensure one at maximum will run per group

Full Access
Question # 5

For Customers who don't use 3rd-party systems, what ways can security incidents be created? (Choose three.)

A.

Security Service Catalog

B.

Security Incident Form

C.

Inbound Email Parsing Rules

D.

Leveraging an Integration

E.

Alert Management

Full Access
Question # 6

What makes a playbook appear for a Security Incident if using Flow Designer?

A.

Actions defined to create tasks

B.

Trigger set to conditions that match the security incident

C.

Runbook property set to true

D.

Service Criticality set to High

Full Access
Question # 7

Which of the following State Flows are provided for Security Incidents? (Choose three.)

A.

NIST Open

B.

SANS Open

C.

NIST Stateful

D.

SANS Stateful

Full Access
Question # 8

If a desired pre-built integration cannot be found in the platform, what should be your next step to find a certified integration?

A.

Build your own through the REST API Explorer

B.

Ask for assistance in the community page

C.

Download one from ServiceNow Share

D.

Look for one in the ServiceNow Store

Full Access
Question # 9

If the customer’s email server currently has an account setup to report suspicious emails, then what happens next?

A.

an integration added to Exchange keeps the ServiceNow platform in sync

B.

the ServiceNow platform ensures that parsing and analysis takes place on their mail server

C.

the customer’s systems are already handling suspicious emails

D.

the customer should set up a rule to forward these mails onto the ServiceNow platform

Full Access