Free ServiceNow CIS-SIR Exam Dumps Questions & Answers

Joe is on the SIR Team and needs to be able to configure Territories and Skills. What role does he need?

• A.  Manager
• B.  Security Basic
• C.  Security Analyst
• D.  Security Admin

Which of the following are potential benefits for utilizing Security Incident assignment automation? (Choose two.)

• A.  Decreased Time to Containment
• B.  Decreased Time to Ingestion
• C.  Increased resolution process consistency
• D.  Increased Mean Time to Remediation

The EmailUserReportedPhishing script include processes inbound emails and creates a record in which table?

• A.  sn_si_phishing_email
• B.  sn_si_incident
• C.  sn_si_phishing_email_header
• D.  ar_sn_si_phishing_email

What factor, if any, limits the ability to close SIR records?

• A.  All post-incident review question:ers have to be completed first
• B.  Nothing, SIR records could be closed at any time
• C.  Best practice dictates that SIR records should be set to 'Resolved' never to 'Closed'
• D.  Opened related INC records

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?

• A.  Detection & Analysis
• B.  Preparation and Identification
• C.  Containment, Eradication, and Recovery
• D.  Post Incident Activity