2021 Latest CIS-SIR Exam Dumps Recently Updated 62 Questions
ServiceNow CIS-SIR Real 2021 Braindumps Mock Exam Dumps
NEW QUESTION 36
What does a flow require?
- A. Security orchestration flows
- B. Runbooks
- C. CAB orders
- D. A trigger
Answer: D
NEW QUESTION 37
The benefits of improved Security Incident Response are expressed __________.
- A. as a series of states with consistent, clear metrics
- B. as desirable outcomes with clear, measurable Key Performance Indicators
- C. as a value on a scale of 1-10 based on specific outcomes
- D. differently depending upon 3 stages: Process Improvement, Process Design, and Post Go-Live
Answer: A
NEW QUESTION 38
A flow consists of one or more actions and a what?
- A. Catalog Designer
- B. NIST Ready State
- C. Change formatter
- D. Trigger
Answer: D
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/quebec-servicenow-platform/page/administer/flow- designer/concept/flows.html
NEW QUESTION 39
What is the first step when creating a security Playbook?
- A. Create a Runbook
- B. Set the Response Task's state
- C. Create a Knowledge Article
- D. Create a Flow
Answer: D
NEW QUESTION 40
What specific role is required in order to use the REST API Explorer?
- A. rest_api_explorer
- B. sn_si.admin
- C. admin
- D. security_admin
Answer: A,C
NEW QUESTION 41
The benefits of improved Security Incident Response are expressed.
- A. as a series of states with consistent, clear metrics
- B. as desirable outcomes with clear, measurable Key Performance Indicators
- C. as a value on a scale of 1-10 based on specific outcomes
- D. differently depending upon 3 stages: Process Improvement, Process Design, and Post Go-Live
Answer: A
NEW QUESTION 42
Which improvement opportunity can be found baseline which can contribute towards process maturity and strengthen costumer's overall security posture?
- A. Post-Incident Review
- B. Incident Analysis
- C. Fast Eradication
- D. Incident Containment
Answer: B
NEW QUESTION 43
What makes a playbook appear for a Security Incident if using Flow Designer?
- A. Trigger set to conditions that match the security incident
- B. Runbook property set to true
- C. Actions defined to create tasks
- D. Service Criticality set to High
Answer: A
NEW QUESTION 44
How do you select which process definition to use?
- A. By selecting the desired process within the Process Definition module
- B. By setting the process definition record to Active
- C. By setting the Script Include record to Active
- D. By selecting the desired process within the Process Selection module
Answer: D
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident- response/reference/setup-assistant-reference.html
NEW QUESTION 45
What is calculated as an arithmetic mean taking into consideration different values in the CI, Security Incident, and User records?
- A. Business Impact
- B. Risk Score
- C. Priority
- D. Severity
Answer: A
NEW QUESTION 46
Select the one capability that retrieves a list of running processes on a CI from a host or endpoint.
- A. Block Action
- B. Publish Watchlist
- C. Sightings Search
- D. Get Network Statistics
- E. Isolate Host
- F. Get Running Processes
Answer: F
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/quebec-security-management/page/product/security- operations-common/concept/get-running-processes-capability.html
NEW QUESTION 47
Joe is on the SIR Team and needs to be able to configure Territories and Skills.
What role does he need?
- A. Security Analyst
- B. Manager
- C. Security Admin
- D. Security Basic
Answer: C
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/quebec-security-management/page/product/security- incident-response/reference/installed-with-sir.html
NEW QUESTION 48
Security tag used when a piece of information requires support to be effectively acted upon, yet carries risks to privacy, reputation, or operations if shared outside of the organizations involved.
- A. TLP:GREEN
- B. TLP:AMBER
- C. TLP:WHITE
- D. TLP:RED
Answer: B
Explanation:
Explanation
Table Description automatically generated
NEW QUESTION 49
A Post Incident Review can contain which of the following? (Choose three.)
- A. Key incident fields
- B. Performance Analytics reports
- C. Attachments associated with the security incident
- D. Post incident question:naires
- E. An audit trail
Answer: A,D,E
NEW QUESTION 50
Which ServiceNow automation capability extends Flow Designer to integrate business processes with other systems?
- A. Integration Hub
- B. Workflow
- C. Orchestration
- D. Subflows
Answer: A
NEW QUESTION 51
What three steps enable you to include a new playbook in the Selected Playbook choice list? (Choose three.)
- A. Search for the new playbook you have created using Flow Designer
- B. Navigate to the sys_playbook_flow.list table
- C. Add the TLP: GREEN tag to the playbooks that you want to include in the Selected Playbook choice list
- D. Navigate to the sys_hub_flow.list table
- E. Add the sir_playbook tag to the playbooks that you want to include in the Selected Playbook choice list
Answer: A,D,E
NEW QUESTION 52
Which of the following process definitions allow only single-step progress through the process defined without allowing step skipping?
- A. SANS Stateful
- B. NIST Stateful
- C. SANS Open
- D. NIST Open
Answer: B
NEW QUESTION 53
What field is used to distinguish Security events from other IT events?
- A. Description
- B. Classification
- C. Type
- D. Source
Answer: B
NEW QUESTION 54
Chief factors when configuring auto-assignment of Security Incidents are.
- A. Security incident priority, CI Location and agent time zone
- B. Agent location, Agent skills and agent time zone
- C. Agent group membership, Agent location and time zone
- D. Agent skills, System Schedules and agent location
Answer: B
NEW QUESTION 55
David is on the Network team and has been assigned a security incident response task.
What role does he need to be able to view and work the task?
- A. Read
- B. External
- C. Security Basic
- D. Security Analyst
Answer: D
NEW QUESTION 56
Which of the following is an action provided by the Security Incident Response application?
- A. Create Record on Security Incident state V1
- B. Look Up Record on Security Incident state V1
- C. Create Outage state V1
- D. Create Response Task set Incident state V1
Answer: B
NEW QUESTION 57
Knowledge articles that describe steps an analyst needs to follow to complete Security incident tasks might be associated to those tasks through which of the following?
- A. Flow
- B. Flow Designer
- C. Workflow
- D. Runbook
- E. Work Instruction Playbook
Answer: D
NEW QUESTION 58
In order to see the Actions in Flow Designer for Security Incident, what plugin must be activated?
- A. Security Spoke
- B. Security Operations Spoke
- C. Security Incident Spoke
- D. Performance Analytics for Security Incident Response
Answer: B
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident- response-orchestration/concept/sir-flows-and-templates.html
NEW QUESTION 59
......
ServiceNow CIS-SIR Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
Verified CIS-SIR Exam Dumps Q&As - Provide CIS-SIR with Correct Answers: https://www.freepdfdump.top/CIS-SIR-valid-torrent.html
