exam questions

Exam CIS-SIR All Questions

View all questions & answers for the CIS-SIR exam

Exam CIS-SIR topic 1 question 93 discussion

Actual exam question from ServiceNow's CIS-SIR
Question #: 93
Topic #: 1
[All CIS-SIR Questions]

Which statement about Security Incident Calculators is correct?

  • A. All Calculator Groups run in order but only the calculator with the highest order in that group runs
  • B. All Calculator Groups run in order but only the first matching calculator from each group will apply
  • C. All Calculator Groups run in order but only the first matching group will apply
  • D. All Calculator Groups run in order and all calculators in the first matching group apply
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Sazeka
4 months, 3 weeks ago
Selected Answer: B
B is correct
upvoted 1 times
...
sephereth
7 months, 3 weeks ago
Selected Answer: B
Explanation: ebook p.230, Calculator groups are used to group scpecific calculators together, for which only on (at maximum) will run. Each calculator will be tried in turn, and the first matching condition will apply the particular calculator (all others will then be ignored), so consider the matually-exclusive grouping criteria. Successive salculators may after previously-set values, but each applied alculator ( and their value) will be reported when the security incident is raised, allowing diagnostic and troubleshooting for incorrect computations. my understanding is, only thef irst matching calculator from each group will apply. (b)
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago