CIS-SIR問題集、ServiceNow実際の試験問題

質問 1

Which of the following is an action provided by the Security Incident Response application?

A. Create Response Task set Incident state V1

B. Look Up Record on Security Incident state V1

C. Create Record on Security Incident state V1

D. Create Outage state V1

正解: B

質問 2

What field is used to distinguish Security events from other IT events?

A. Classification

B. Source

C. Description

D. Type

正解: A

質問 3

What is the first step when creating a security Playbook?

A. Create a Knowledge Article

B. Set the Response Task's state

C. Create a Runbook

D. Create a Flow

正解: D

質問 4

In order to see the Actions in Flow Designer for Security Incident, what plugin must be activated?

A. Security Spoke

B. Security Incident Spoke

C. Performance Analytics for Security Incident Response

D. Security Operations Spoke

正解: D

質問 5

What role(s) are required to add new items to the Security Incident Catalog?

A. requires both sn_si.write and catalog_admin roles

B. requires the sn_si.admin role

C. requires the admin role

D. requires the sn_si.catalog role

正解: C

質問 6

Why is it important that the Platform (System) Administrator and the Security Incident administrator role be separated? (Choose three.)

A. Access to security incident data may need to be restricted

B. Preserve the security image in the company

C. Reduce the number of incidents assigned to the Platform Admin

D. Clear separation of duty

E. Allow SIR Teams to control assignment of security roles

正解: C,D,E

質問 7

What are two of the audiences identified that will need reports and insight into Security Incident Response reports? (Choose two.)

A. Problem Managers

B. Vulnerability Managers

C. Analysts

D. Chief Information Security Officer (CISO)

正解: B,C

ServiceNow Certified Implementation Specialist - Security Incident Response - CIS-SIR 模擬練習