Free ServiceNow Certified Implementation Specialist – Security Incident Response Exam CIS-SIR Exam Practice Test

There are several methods in which security incidents can be raised, which broadly fit into one of these categories: . (Choose two.)

• Integrations
• Manually created
• Automatically created
• Email parsing

If the customer's email server currently has an account setup to report suspicious emails, then what happens next?

• an integration added to Exchange keeps the ServiceNow platform in sync
• the ServiceNow platform ensures that parsing and analysis takes place on their mail server
• the customer's systems are already handling suspicious emails
• the customer should set up a rule to forward these mails onto the ServiceNow platform

Chief factors when configuring auto-assignment of Security Incidents are .

• Agent group membership, Agent location and time zone
• Security incident priority, CI Location and agent time zone
• Agent skills, System Schedules and agent location
• Agent location, Agent skills and agent time zone

Select the one capability that restricts connections from one CI to other devices.

• Isolate Host
• Sightings Search
• Block Action
• Get Running Processes
• Get Network Statistics
• Publish Watchlist

A flow consists of . (Choose two.)

• Scripts
• Actions
• Processes
• Actors
• Triggers

Which of the following tag classifications are provided baseline? (Choose three.)

• Traffic Light Protocol
• Block from Sharing
• IoC Type
• Severity
• Cyber Kill Chain Step
• Escalation Level
• Enrichment whitelist/blacklist

What is the fastest way for security incident administrators to remove unwanted widgets from the Security Incident Catalog?

• Clicking the X on the top right corner
• Talking to the system administrator
• Can't be removed
• Through the Catalog Definition record

Which of the following fields is used to identify an Event that is to be used for Security purposes?

• IT
• Classification
• Security
• CI

What is the key to a successful implementation?

• Sell customer the most expensive package
• Implementing everything that we offer
• Understanding the customer's goals and objectives
• Building custom integrations

In order to see the Actions in Flow Designer for Security Incident, what plugin must be activated?

• Performance Analytics for Security Incident Response
• Security Spoke
• Security Operations Spoke
• Security Incident Spoke