2021 Free ServiceNow CIS-SIR Exam Demo and Practice Exam Questions

1. What does a flow require?

Security orchestration flows

Runbooks

CAB orders

A trigger

2. A flow consists of one or more actions and a what?

Change formatter

Catalog Designer

NIST Ready State

Trigger

3. Select the one capability that restricts connections from one CI to other devices.

Isolate Host

Sightings Search

Block Action

Get Running Processes

Get Network Statistics

Publish Watchlist

4. There are several methods in which security incidents can be raised, which broadly fit into one of these categories:. (Choose two.)

Integrations

Manually created

Automatically created

Email parsing

5. A pre-planned response process contains which sequence of events?

Organize, Analyze, Prioritize, Contain

Organize, Detect, Prioritize, Contain

Organize, Prepare, Prioritize, Contain

Organize, Verify, Prioritize, Contain

6. What is the key to a successful implementation?

Sell customer the most expensive package

Implementing everything that we offer

Understanding the customer’s goals and objectives

Building custom integrations

7. Which of the following are potential benefits for utilizing Security Incident assignment automation? (Choose two.)

Decreased Time to Containment

Increased Mean Time to Remediation

Decreased Time to Ingestion

Increased resolution process consistency

8. Why should discussions focus with the end in mind?

To understand desired outcomes

To understand current posture

To understand customer’s process

To understand required tools

9. Chief factors when configuring auto-assignment of Security Incidents are.

Agent group membership, Agent location and time zone

Security incident priority, CI Location and agent time zone

Agent skills, System Schedules and agent location

Agent location, Agent skills and agent time zone

10. Which of the following fields is used to identify an Event that is to be used for Security purposes?

Classification

Security

Leave a Reply Cancel reply