Certified Implementation Specialist - Security Incident Response Exam (CIS-SIR) Free Practice Test

Question 1

What is the key to a successful implementation?

A. Sell customer the most expensive package

B. Implementing everything that we offer

C. Building custom integrations

D. Understanding the customer's goals and objectives

Correct Answer: D

Question 2

When a record is created in the Security Incident Phishing Email table what is triggered to create a Security Incident?

A. Transform flow

B. Transform workflow

C. Ingestion Rule

D. Duplication Rule

Correct Answer: C

Question 3

What field is used to distinguish Security events from other IT events?

A. Classification

B. Source

C. Type

D. Description

Correct Answer: A

Question 4

When a service desk agent uses the Create Security Incident UI action from a regular incident, what occurs?

A. A security incident is raised on their behalf but only a notification is displayed

B. The service desk agent is redirected to the Security Incident Catalog to complete the record producer

C. The incident is marked resolved with an automatic security resolution code

D. A security incident is raised on their behalf and displayed to the service desk agent

Correct Answer: C

Question 5

How do you select which process definition to use?

A. By selecting the desired process within the Process Definition module

B. By setting the Script Include record to Active

C. By selecting the desired process within the Process Selection module

D. By setting the process definition record to Active

Correct Answer: C

Question 6

What is the name of the Inbound Action that validates whether an inbound email should be processed as a phishing email for URP v2?

A. Create Phishing Email

B. User Reporting Phishing (for Forwarded emails)

C. Scan email for threats

D. User Reporting Phishing (for New emails)

Correct Answer: B

Question 7

What plugin must be activated to see the New Security Analyst UI?

A. Security Agent UI Plugin

B. Security Incident Response UI plugin

C. Security Operations UI plugin

D. Security Analyst UI Plugin

Correct Answer: A

Welcome to TestSimulate

ServiceNow Certified Implementation Specialist - Security Incident Response (CIS-SIR) Free Practice Test