Pass the ServiceNow CIS-Security Incident Response CIS-SIR Questions and answers with ValidTests

Incident

Log

Ticket

Alert

Event

admin

sn_si.admin

rest_api_explorer

security_admin

an integration added to Exchange keeps the ServiceNow platform in sync

the ServiceNow platform ensures that parsing and analysis takes place on their mail server

the customer’s systems are already handling suspicious emails

the customer should set up a rule to forward these mails onto the ServiceNow platform

Post Incident Activity

Detection & Analysis

Preparation and Identification

Containment, Eradication, and Recovery

The incident is marked resolved with an automatic security resolution code

A security incident is raised on their behalf but only a notification is displayed

A security incident is raised on their behalf and displayed to the service desk agent

The service desk agent is redirected to the Security Incident Catalog to complete the record producer

Sell customer the most expensive package

Implementing everything that we offer

Understanding the customer’s goals and objectives

Building custom integrations

Organize, Analyze, Prioritize, Contain

Organize, Detect, Prioritize, Contain

Organize, Prepare, Prioritize, Contain

Organize, Verify, Prioritize, Contain

Because SIR is a scoped application, roles and script includes will begin with the sn_si prefix

Because the Security Incident Response application uses a Secure Identity token

Because ServiceNow checks the instance for a Secure Identity when logging on to this scoped application

Because ServiceNow tracks license use against the Security Incident Response Application

Security Analyst UI Plugin

Security Incident Response UI plugin

Security Operations UI plugin

Security Agent UI Plugin

Any user that adds a worknote to the ticket

The analyst assigned to the ticket

Any user who has Response Tasks on the incident

The Affected User on the incident