CIS-SIR Practice Online

Question 1

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security

incident?

A : Post Incident Activity

B : Detection & Analysis

C : Preparation and Identification

D : Containment, Eradication, and Recovery

Answer: D

Question 2

Runbook records utilize a link to what type record for content?

A : Knowledge article

B : Response Tasks

C : Managed Document

D : Instruction Details

Answer: C

Question 3

The following term is used to describe any observable occurrence: __________.

A : Incident

B : Log

C : Ticket

D : Alert

E : Event

Answer: A

Question 4

The sn_si.external role is given to external users working on security incidents. What activities can external user complete with this role? (Choose two.)

A : View related CI record

B : View the Security Incident record

C : View assigned Tasks

D : Work Tasks assigned to them

Answer: B,D

Question 5

Which of the following management activities are associated with Major Security Incident Management?

A : Link security incidents as child incidents to other child incidents, so that all security incidents can be worked

B : Link security incidents as parent incidents to the major security incident (MSI) so that all security incidents can be worked

C : Link security incidents as child incidents to the major security incident (MSI) so that all security incidents can be worked

D : Link security incidents as minor incidents to the major security incident (MSI) so that all security incidents can be worked

Answer: C

Name:	Certified Implementation Specialist - Security Incident Response
Exam Code:	CIS-SIR
Certification:	Certified Implementation Specialist
Vendor:	ServiceNow
Total Questions:	115
Last Updated:	May 14, 2024

Download Demo CIS-SIR Dumps

Create Account

Password Recovery

CIS-SIR Practice Online

Download Demo CIS-SIR Dumps

Member Login

Create Account

Password Recovery

CIS-SIR Practice Online