ExamTopics Logo
Mail Us[email protected]
Menu
Servicenow Discussions
exam questions

Exam CIS-SIR All Questions

View all questions & answers for the CIS-SIR exam
Go to Exam

Exam CIS-SIR topic 1 question 24 discussion

Actual exam question from ServiceNow's CIS-SIR
Question #: 24
Topic #: 1
[All CIS-SIR Questions]

If the customer’s email server currently has an account setup to report suspicious emails, then what happens next?

  • A. an integration added to Exchange keeps the ServiceNow platform in sync
  • B. the ServiceNow platform ensures that parsing and analysis takes place on their mail server
  • C. the customer’s systems are already handling suspicious emails
  • D. the customer should set up a rule to forward these mails onto the ServiceNow platform
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by sephereth at July 11, 2023, 2:10 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Sazeka
4 months, 1 week ago
Selected Answer: D
The correct answer is D. According to the Ebook Security Incident Response (Tokyo ) page 63: "If the customer currently has an email account on their email server where these emails are sent to, they MUST forward the email to the platform address specified here (ServiceNow) so that the parsing and transform maps can take place."
upvoted 1 times
...
sephereth
7 months, 3 weeks ago
Selected Answer: D
ServiceNow can monitor a designated email account, and when an email arrives, it can be parsed and processed according to predefined rules. So, emails need to be forwarded to the ServiceNow platform for parsing.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago