exam questions

Exam CIS-SIR All Questions

View all questions & answers for the CIS-SIR exam

Exam CIS-SIR topic 1 question 51 discussion

Actual exam question from ServiceNow's CIS-SIR
Question #: 51
Topic #: 1
[All CIS-SIR Questions]

Which of the following tag classifications are provided baseline? (Choose three.)

  • A. Traffic Light Protocol
  • B. Block from Sharing
  • C. IoC Type
  • D. Severity
  • E. Cyber Kill Chain Step
  • F. Escalation Level
  • G. Enrichment whitelist/blacklist
Show Suggested Answer Hide Answer
Suggested Answer: ABG 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
NokoNice
3 days, 3 hours ago
Selected Answer: ABG
Enrichment whitelist/blacklist, metatag, traffic light protocol, block from sharing.
upvoted 1 times
...
MrBravo
5 months ago
Selected Answer: ABG
Vancouver eBook p. 237: Enrichment whitelist/blacklist, metatag, traffic light protocol, block from sharing.
upvoted 2 times
...
MarcoBartoli
7 months, 3 weeks ago
A,B,G is correct
upvoted 1 times
...
sephereth
11 months, 2 weeks ago
Selected Answer: ABG
Explanation: ebook p.211, Three efault classification groups included baseline are: - Enrichment whitelist/blacklist - Traffic Light Protocol - Block from sharing - *note Metatag is provided as demo data, used to create custom classification tags for Security Operations applications (SOA)
upvoted 2 times
...
NSL_ever
11 months, 3 weeks ago
A,B,G are the three selections
upvoted 3 times
...
Remo878
1 year ago
Selected Answer: ABF
A b f options
upvoted 1 times
sephereth
11 months, 2 weeks ago
A and b is correct, f isn't, should be G.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago