ExamTopics Logo
Mail Us[email protected]
Menu
Servicenow Discussions
exam questions

Exam CIS-SIR All Questions

View all questions & answers for the CIS-SIR exam
Go to Exam

Exam CIS-SIR topic 1 question 51 discussion

Actual exam question from ServiceNow's CIS-SIR
Question #: 51
Topic #: 1
[All CIS-SIR Questions]

Which of the following tag classifications are provided baseline? (Choose three.)

  • A. Traffic Light Protocol
  • B. Block from Sharing
  • C. IoC Type
  • D. Severity
  • E. Cyber Kill Chain Step
  • F. Escalation Level
  • G. Enrichment whitelist/blacklist
Show Suggested Answer Hide Answer
Suggested Answer: ABG 🗳️
by Remo878 at June 15, 2023, 9:41 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
NokoNice
4 months ago
Selected Answer: ABG
Enrichment whitelist/blacklist, metatag, traffic light protocol, block from sharing.
upvoted 1 times
...
MrBravo
9 months ago
Selected Answer: ABG
Vancouver eBook p. 237: Enrichment whitelist/blacklist, metatag, traffic light protocol, block from sharing.
upvoted 3 times
...
MarcoBartoli
11 months, 3 weeks ago
A,B,G is correct
upvoted 1 times
...
sephereth
1 year, 3 months ago
Selected Answer: ABG
Explanation: ebook p.211, Three efault classification groups included baseline are: - Enrichment whitelist/blacklist - Traffic Light Protocol - Block from sharing - *note Metatag is provided as demo data, used to create custom classification tags for Security Operations applications (SOA)
upvoted 3 times
...
NSL_ever
1 year, 3 months ago
A,B,G are the three selections
upvoted 4 times
...
Remo878
1 year, 4 months ago
Selected Answer: ABF
A b f options
upvoted 1 times
sephereth
1 year, 3 months ago
A and b is correct, f isn't, should be G.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago