ExamTopics Logo
Mail Us[email protected]
Menu
Servicenow Discussions
exam questions

Exam CIS-SIR All Questions

View all questions & answers for the CIS-SIR exam
Go to Exam

Exam CIS-SIR topic 1 question 82 discussion

Actual exam question from ServiceNow's CIS-SIR
Question #: 82
Topic #: 1
[All CIS-SIR Questions]

Events received from external tools should include what information? (Choose three.)

  • A. A list of similar indicators that were discovered in the event details
  • B. Event description, which populates the description of the security incident
  • C. Event classification set to Security to distinguish them from other IT events
  • D. Whitelisted and Blacklisted IP addresses
  • E. Node set to the name, IP address, or sys_id of the CI that becomes the affected resource
Show Suggested Answer Hide Answer
Suggested Answer: BCE 🗳️
by Sazeka at Oct. 8, 2023, 12:56 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Sazeka
4 months, 3 weeks ago
Selected Answer: BCE
B. Event description, which populates the description of the security incident C. Event classification set to Security to distinguish them from other IT events E. Node set to the name, IP address, or sys_id of the CI that becomes the affected resource So, the correct answers are B, C, and E.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago