Confidently Practice Online with Free CIS-SIR Exam Cram

Practice your Certified Implementation Specialist - Security Incident Response certification test with free CIS-SIR exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real CIS-SIR exam dumps, verified questions, and expert-designed free online practice tests. Moreover our ServiceNow CIS-SIR exam cram backed by our confidence-boosting refund guarantee.

Question 1

Security Incidents can be created using a manual UI Action on which one of the following record types?

Options :

A : Event

B : Email Notification

C : Workflow

D : Alert

Answer: D

Question 2

Why is it important that the Platform (System) Administrator and the Security Incident administrator role be

separated? (Choose three.)

Options :

A :

Access to security incident data may need to be restricted

B : Allow SIR Teams to control assignment of security roles

C : Clear separation of duty

D : Reduce the number of incidents assigned to the Platform Admin

E : Preserve the security image in the company

Answer: B,C,D

Question 3

Which of the following is an action provided by the Security Incident Response application?

Options :

A : Create Outage state V1

B : Create Record on Security Incident state V1

C :

Create Response Task set Incident state V1

D : Look Up Record on Security Incident state V1

Answer: D

Question 4

Which of the following management activities are associated with Major Security Incident Management?

Options :

A : Link security incidents as child incidents to other child incidents, so that all security incidents can be worked

B : Link security incidents as parent incidents to the major security incident (MSI) so that all security incidents can be worked

C : Link security incidents as child incidents to the major security incident (MSI) so that all security incidents can be worked

D : Link security incidents as minor incidents to the major security incident (MSI) so that all security incidents can be worked

Answer: C

Question 5

To configure Security Incident Escalations, you need the following role(s): __________.

Options :

A : sn_si.admin

B : sn_si.admin or sn_si.manager

C :

sn_si.admin or sn_si.ciso

D : sn_si.manager or sn_si.analyst

Answer: A