Practice CIS-SIR Exam Online

Question 1

Runbook records utilize a link to what type record for content?

A : Knowledge article

B : Response Tasks

C : Managed Document

D : Instruction Details

Answer: C

Question 2

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security

incident?

A : Post Incident Activity

B : Detection & Analysis

C : Preparation and Identification

D : Containment, Eradication, and Recovery

Answer: D

Question 3

Which of the following management activities are associated with Major Security Incident Management?

A : Link security incidents as child incidents to other child incidents, so that all security incidents can be worked

B : Link security incidents as parent incidents to the major security incident (MSI) so that all security incidents can be worked

C : Link security incidents as child incidents to the major security incident (MSI) so that all security incidents can be worked

D : Link security incidents as minor incidents to the major security incident (MSI) so that all security incidents can be worked

Answer: C

Question 4

Which of the following is an action provided by the Security Incident Response application?

A : Create Outage state V1

B : Create Record on Security Incident state V1

C :

Create Response Task set Incident state V1

D : Look Up Record on Security Incident state V1

Answer: D

Question 5

To configure Security Incident Escalations, you need the following role(s): __________.

A : sn_si.admin

B : sn_si.admin or sn_si.manager

C :

sn_si.admin or sn_si.ciso

D : sn_si.manager or sn_si.analyst

Answer: A

Name:	Certified Implementation Specialist - Security Incident Response
Exam Code:	CIS-SIR
Certification:	Certified Implementation Specialist
Vendor:	ServiceNow
Total Questions:	115
Last Updated:	Apr 23, 2024

ServiceNow CIS-SIR