CIS-SIR Online Practice Questions and Answers

Which ServiceNow automation capability extends Flow Designer to integrate business processes with other systems?

A. Workflow

B. Orchestration

C. Subflows

D. Integration Hub

What is the first step when creating a security Playbook?

A. Set the Response Task's state

B. Create a Flow

C. Create a Runbook

D. Create a Knowledge Article

Incident severity is influenced by the business value of the affected asset. Which of the following are asset types that can be affected by an incident? (Choose two.)

A. Business Service

B. Configuration Item

C. Calculator Group

D. Severity Calculator

Using the KB articles for Playbooks tasks also gives you which of these advantages?

A. Automated activities to run scans and enrich Security Incidents with real time data

B. Automated activities to resolve security Incidents through patching

C. Improved visibility to threats and vulnerabilities

D. Enhanced ability to create and present concise, descriptive tasks

Flow Triggers can be based on what? (Choose three.)

A. Record changes

B. Schedules

C. Subflows

D. Record inserts

E. Record views

What is the purpose of Calculator Groups as opposed to Calculators?

A. To provide metadata about the calculators

B. To allow the agent to select which calculator they want to execute

C. To set the condition for all calculators to run

D. To ensure one at maximum will run per group

A flow consists of one or more actions and a what?

A. Change formatter

B. Catalog Designer

C. NIST Ready State

D. Trigger

What field is used to distinguish Security events from other IT events?

A. Type

B. Source

C. Classification

D. Description

Which of the following are potential benefits for utilizing Security Incident assignment automation? (Choose two.)

A. Decreased Time to Containment

B. Increased Mean Time to Remediation

C. Decreased Time to Ingestion

D. Increased resolution process consistency

The following term is used to describe any observable occurrence:.

A. Incident

B. Log

C. Ticket

D. Alert

E. Event