CIS-SIR: Certified Implementation Specialist - Security Incident Response

What makes a playbook appear for a Security Incident if using Flow Designer?

Actions defined to create tasks
Trigger set to conditions that match the security incident
Runbook property set to true
Service Criticality set to High

Correct answer: B

What is the purpose of Calculator Groups as opposed to Calculators?

To provide metadata about the calculators
To allow the agent to select which calculator they want to execute
To set the condition for all calculators to run
To ensure one at maximum will run per group

Correct answer: C

Explanation:

Reference: https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident-response/reference/setup-assistant-reference.html

The following term is used to describe any observable occurrence: __________.

Incident
Log
Ticket
Alert
Event

Correct answer: E

The severity field of the security incident is influenced by what?

The cost of the response to the security breach
The impact, urgency and priority of the incident
The time taken to resolve the security incident
The business value of the affected asset

Correct answer: D

The Risk Score is calculated by combining all the weights using __________.

an arithmetic mean
addition
the Risk Score script include
a geometric mean

Correct answer: A

Explanation:

Reference: https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident-response/reference/setup-assistant-reference.html

What are two of the audiences identified that will need reports and insight into Security Incident Response reports? (Choose two.)

Analysts
Vulnerability Managers
Chief Information Security Officer (CISO)
Problem Managers

Correct answer: AB

Explanation:

Reference: https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/resource-center/data-sheet/ds-security-operations.pdf

What three steps enable you to include a new playbook in the Selected Playbook choice list? (Choose three.)

Add the TLP: GREEN tag to the playbooks that you want to include in the Selected Playbook choice list
Navigate to the sys_hub_flow.list table
Search for the new playbook you have created using Flow Designer
Add the sir_playbook tag to the playbooks that you want to include in the Selected Playbook choice list
Navigate to the sys_playbook_flow.list table

Correct answer: BCD

Explanation:

Reference: https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident-response/concept/sir-new-ui-add-playbook.html

Which improvement opportunity can be found baseline which can contribute towards process maturity and strengthen costumer’s overall security posture?

Post-Incident Review
Fast Eradication
Incident Containment
Incident Analysis

Correct answer: D

What is the fastest way for security incident administrators to remove unwanted widgets from the Security Incident Catalog?

Clicking the X on the top right corner
Talking to the system administrator
Can't be removed
Through the Catalog Definition record

Correct answer: D

Select the one capability that retrieves a list of running processes on a CI from a host or endpoint.

Get Network Statistics
Isolate Host
Get Running Processes
Publish Watchlist
Block Action
Sightings Search

Correct answer: C

Explanation:

Reference: https://docs.servicenow.com/bundle/quebec-security-management/page/product/security-operations-common/concept/get-running-processes-capability.html

Vendor:	ServiceNow
Exam Code:	CIS-SIR
Exam Name:	Certified Implementation Specialist - Security Incident Response
Date:	May 28, 2021
File Size:	582 KB

Download Certified Implementation Specialist - Security Incident Response.CIS-SIR.VCEplus.2021-05-28.60q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown