Which investigation element is best suited for collaboration among users?

• A.Context Data
• B.Work Plan
• C.Related Incidents
• D.War Room

Comment: *

Name: *

Email: *

Verification: *

In which two ways can data be transferred between playbooks and sub-playbooks? (Choose two.)

• A.Automatically extracted by sub-playbooks
• B.Inputs and outputs
• C.Through integration context
• D.From context data, if context is shared globally

Comment: *

Name: *

Email: *

Verification: *

Multiple company assets were reported by vulnerability scanners as being vulnerable to CVE-2017-11882.
This vulnerability affects applications installed on workstations. The SOC team needs to take action and apply the new vulnerability patch that was just released. The team must first create a cause for each of the identified assets in ServiceNow IT Service Management (ITSM), in order to notify the IT department. Next, the team creates a task in the main playbook, which extracts the list of assets from the scanner report.
After the list of assets are created, what are the two solutions that the SOC team could take so that a case could be created and a patch installed? (Choose two.)

• A.Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator contains the count of the number of items in the list) and perform the following tasks:
  -Active Directory User Enrichment based on the computerName
  -Create the ServiceNow Record by adding the enrichment information
  -Mark the ticket severity as Urgent
• B.Create a sub-playbook with a single input containing the computer names that will loop 'For Each Input' and perform the following tasks:
  -Active Directory User Enrichment based on the computerName
  -Create the ServiceNow Record by adding the enrichment information
  -Mark the ticket severity as Urgent
• C.Create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Condition: AreValuesEqual - Exit on yes - left:1, right 1) and perform the following tasks:
  -Active Directory User Enrichment based on the computerName
  -Create the ServiceNow Record by adding the enrichment information
  -Mark the ticket severity as Urgent
• D.Set a key for storing the iteration number and create a sub-playbook with a single input containing the computer names that will loop until the last item from the asset list (Exit condition: iterator equal to count of the number of item in the list) and perform the following tasks:
  -Increase the iterator value by one each time
  -Active Directory User Enrichment based on the computerName
  -Create the ServiceNow Record by adding the enrichment information
  -Mark the ticket severity as Urgent

Comment: *

Name: *

Email: *

Verification: *

An engineer would like to present a trend using widgets to compare to a previous week's data. Which two methods will allow the engineer to meet the requirement? (Choose two.)

• A.Create a custom widget using a new incident query
• B.Create widget of type Line, check 'Display Trend' and define as 7 days ago
• C.Create widget of type Number, check 'Display Trend' and define as 7 days ago
• D.Create a custom widget using a script

Comment: *

Name: *

Email: *

Verification: *

When mapping incoming data to incident fields, which statement is correct?

• A.Only text fields are classified
• B.Data that is not mapped is placed under labels
• C.Classification cannot be used if mapping is enabled
• D.Every incoming field must be mapped

Comment: *

Name: *

Email: *

Verification: *