Free Certified Implementation Specialist – Vulnerability Response Exam CIS-VR Exam Practice Test

After closing the Vulnerable Item (VI), it is recommended to:

• Update the values in the Vulnerability Score Indicator (VSl) based on the criticality of the Vulnerability.
  
• The VI remains active and in place until the Scanner rescans and closes the VI.
  
• Mark the CI as exempt from the Vulnerability if the vulnerability was remediated.
  
• Compare the Vulnerability with subsequent scans.
  

Which of the following best describes a Vulnerability Group?

• Groups Vis using a Filter against Vulnerable Item Fields
  
• A Filter defining a sub-set of Cls to be treated as a group
  
• The User Group assigned to resolving the Vulnerable Item
  
• Must have a corresponding filter group
  

When an approval is rejected for a Vulnerable Item exception, what happens to the State field for that record?

• It reverts to 'Analysis'
  
• It is set to 'New'
  
• It is set to 'In Review'
  
• It will be set back to its previous value
  

In ServiceNow, which plugin needs to be added to enable Vulnerability integration with Qualys, Tenable, or Rapid7?

• Vulnerability Response
  
• Trusted Security Circles
  
• Threat Intelligence
  
• Security Incident Response
  

Which statement about patching is most correct?

• Mature organizations abandon patching
  
• Patch management and Vulnerability Response are interchangeable terms
  
• Patching is one of many responses to a Vulnerability
  
• As long as you are patching actively. Vulnerability Response isn't necessary
  

Which of the following can NOT be used for building Vulnerability Groups?

• Vulnerability
  
• Filter Groups
  
• Condition Builder
  
• Advanced Scripts
  

What must Vulnerability Exceptions be supplied by default?

• A reason for the exception
  
• Integrations with GRC to handle the exception
  
• Requirement Actions for the exception
  
• A manual approval authority for the exception
  

Some customers may have a clearly-defined, well-documented vulnerability exception process and some may even provide a diagram illustrating that process What is the main advantage of having this documentationwhen translating it into a Flow or Workflow?

• Perfect opportunity for process improvement
  
• Understand their internal process
  
• Build the Flow/WorKflow directly into the platform
  
• No advantage
  

The Vulnerability Admin role (sn_vul.admin) can modify Vulnerability Application Properties and can be delegated to the following role(s):

• ServiceNow Security Operations Admin (sn_sec.admin)
  
• Security Admin (security.admin)
  
• Vulnerability Response Admin (sn_vul_resp.admin)
  
• All of the above
  
• None of the above
  

Managers should have access to which role-based data access and visualizations? Choose 3 answers

• Aggregations for priority and workload
  
• Time period views
  
• Up-to-the-minute views
  
• Drill-down to granularity