ServiceNow CIS-SIR - Certified Implementation Specialist - Security Incident Response Exam
Page: 3 / 25
Total 125 questions
Question #11 (Topic: Exam A)
Which Table would be commonly used for Security Incident Response?
A. sysapproval_approver
B. sec_ops_incident
C. cmdb_rel_ci
D. sn_si_incident
Answer: D
Question #12 (Topic: Exam A)
There are several methods in which security incidents can be raised, which broadly fit into one of these categories: __________. (Choose two.)
A. Integrations
B. Manually created
C. Automatically created
D. Email parsing
Answer: BC
Question #13 (Topic: Exam A)
What is the first step when creating a security Playbook?
A. Set the Response Task's state
B. Create a Flow
C. Create a Runbook
D. Create a Knowledge Article
Answer: B
Question #14 (Topic: Exam A)
To configure Security Incident Escalations, you need the following role(s): __________.
A. sn_si.admin
B. sn_si.admin or sn_si.manager
C. sn_si.admin or sn_si.ciso
D. sn_si.manager or sn_si.analyst
Answer: A
Question #15 (Topic: Exam A)
Which of the following are potential benefits for utilizing Security Incident assignment automation? (Choose two.)
A. Decreased Time to Containment
B. Increased Mean Time to Remediation
C. Decreased Time to Ingestion
D. Increased resolution process consistency
Answer: AD
