Free ServiceNow CIS-SIR Exam Dumps Questions & Answers

If the customer's email server currently has an account setup to report suspicious emails, then what happens next?

• A.  an integration added to Exchange keeps the ServiceNow platform in sync
• B.  the customer should set up a rule to forward these mails onto the ServiceNow platform
• C.  the ServiceNow platform ensures that parsing and analysis takes place on their mail server
• D.  the customer's systems are already handling suspicious emails

The severity field of the security incident is influenced by what?

• A.  The business value of the affected asset
• B.  The cost of the response to the security breach
• C.  The impact, urgency and priority of the incident
• D.  The time taken to resolve the security incident

Which of the following is an action provided by the Security Incident Response application?

• A.  Look Up Record on Security Incident state V1
• B.  Create Response Task set Incident state V1
• C.  Create Outage state V1
• D.  Create Record on Security Incident state V1

David is on the Network team and has been assigned a security incident response task. What role does he need to be able to view and work the task?

• A.  Security Basic
• B.  External
• C.  Read
• D.  Security Analyst

Which one of the following reasons best describes why roles for Security Incident Response (SIR) begin with
"sn_si"?

• A.  Because SIR is a scoped application, roles and script includes will begin with the sn_si prefix
• B.  Because ServiceNow checks the instance for a Secure Identity when logging on to this scoped application
• C.  Because the Security Incident Response application uses a Secure Identity token
• D.  Because ServiceNow tracks license use against the Security Incident Response Application