If the customer's email server currently has an account setup to report suspicious emails, then what happens next?

• A.the customer should set up a rule to forward these mails onto the ServiceNow platform
• B.the ServiceNow platform ensures that parsing and analysis takes place on their mail server
• C.an integration added to Exchange keeps the ServiceNow platform in sync
• D.the customer's systems are already handling suspicious emails

Comment: *

Name: *

Email: *

Verification: *

Which of the following are potential benefits for utilizing Security Incident assignment automation? (Choose two.)

• A.Increased Mean Time to Remediation
• B.Decreased Time to Containment
• C.Decreased Time to Ingestion
• D.Increased resolution process consistency

Comment: *

Name: *

Email: *

Verification: *

Which one of the following users is automatically added to the Request Assessments list?

• A.The Affected User on the incident
• B.Any user who has Response Tasks on the incident
• C.The analyst assigned to the ticket
• D.Any user that adds a worknote to the ticket

Comment: *

Name: *

Email: *

Verification: *

What makes a playbook appear for a Security Incident if using Flow Designer?

• A.Runbook property set to true
• B.Trigger set to conditions that match the security incident
• C.Service Criticality set to High
• D.Actions defined to create tasks

Comment: *

Name: *

Email: *

Verification: *

Which of the following tag classifications are provided baseline? (Choose three.)

• A.Traffic Light Protocol
• B.Block from Sharing
• C.IoC Type
• D.Severity
• E.Cyber Kill Chain Step
• F.Escalation Level
• G.Enrichment whitelist/blacklist

Comment: *

Name: *

Email: *

Verification: *