ExamTopics Logo
Mail Us[email protected]
Menu
 

CIS-SIR Actual Exam Questions

Last updated on Dec. 15, 2024.
Vendor:ServiceNow
Exam Code:CIS-SIR
Exam Name:Certified Implementation Specialist - Security Incident Response
Exam Questions:125
97% Passed the exam with this material
 

Topic 1 - Exam A

Question #1 Topic 1

What makes a playbook appear for a Security Incident if using Flow Designer?

  • A. Actions defined to create tasks
  • B. Trigger set to conditions that match the security incident
  • C. Runbook property set to true
  • D. Service Criticality set to High
Reveal Solution Hide Solution   Discussion   5

Correct Answer: B 🗳️

Question #2 Topic 1

What is the purpose of Calculator Groups as opposed to Calculators?

  • A. To provide metadata about the calculators
  • B. To allow the agent to select which calculator they want to execute
  • C. To set the condition for all calculators to run
  • D. To ensure one at maximum will run per group
Reveal Solution Hide Solution   Discussion   9

Correct Answer: D 🗳️

Question #3 Topic 1

The following term is used to describe any observable occurrence: __________.

  • A. Incident
  • B. Log
  • C. Ticket
  • D. Alert
  • E. Event
Reveal Solution Hide Solution   Discussion   3

Correct Answer: E 🗳️

Question #4 Topic 1

The severity field of the security incident is influenced by what?

  • A. The cost of the response to the security breach
  • B. The impact, urgency and priority of the incident
  • C. The time taken to resolve the security incident
  • D. The business value of the affected asset
Reveal Solution Hide Solution   Discussion   10

Correct Answer: D 🗳️

file Viewing page 1 out of 32 pages.
Viewing questions 1-4 out of 125 questions
Next Questions
Browse atleast 50% to increase passing rate cup
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago