exam questions

Exam CIS-SIR All Questions

View all questions & answers for the CIS-SIR exam

Exam CIS-SIR topic 1 question 106 discussion

Actual exam question from ServiceNow's CIS-SIR
Question #: 106
Topic #: 1
[All CIS-SIR Questions]

Once a Phishing Email record is created, which Flow creates a new Security Incident record?

  • A. Security Incident - Phishing Manual
  • B. Security Incident - Automated Phishing Playbook
  • C. Child Incident Automated Flow
  • D. Transform Phishing Email to Security Incident
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
MrBravo
9 months, 1 week ago
Selected Answer: D
"The Transform Phishing Email to Security Incident flow is a new flow that converts or transforms phishing email records to security incidents."
upvoted 1 times
...
DukeCheckem
11 months, 1 week ago
Selected Answer: D
"Transform user-reported phishing emails to security incidents The Transform Phishing Email to Security Incident flow is a new flow that converts or transforms phishing email records to security incidents." //https://docs.servicenow.com/bundle/vancouver-security-management/page/product/security-incident-response/concept/urp-about.html#urp-transform-flow
upvoted 2 times
...
Sazeka
1 year ago
Selected Answer: C
Double checked in the book. according to the eBook page 314 it is stated the following: The Transform flow evaluates the Child incident aggregation email property. It it is set to true, then the flow will determine whether the incident is new or should be set up as a child of an existing incident. This flow utilizes a highly configurable aggregation design to determine child incidents.
upvoted 1 times
...
sephereth
1 year, 3 months ago
Selected Answer: D
verified in course provided SN instance,
upvoted 1 times
sephereth
1 year, 3 months ago
there is 2 versions, Transform Phishing Email to Security Incident v1 and Transform Phishing Email to Security Incident v1.1 both inactive
upvoted 1 times
Sazeka
1 year ago
I disagree. The Answer D, "Transform Phishing Email to Security Incident," might be a valid option in some ServiceNow implementations, but it's not a standard flow provided by ServiceNow out of the box. I go with B
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago