ServiceNow Certified Implementation Specialist - Security Incident Response - CIS-SIR Exam Practice Test

A. Service Criticality set to High B. Actions defined to create tasks C. Trigger set to conditions that match the security incident D. Runbook property set to true

A. Security Admin B. Security Analyst C. Security Basic D. Manager

A. Who reported the phishing attempt B. IP addresses from the header C. URLs, domains, or IP addresses appearing in the body D. State of the phishing email E. Type of Ingestion Rule used to identify this email as a phishing attempt F. Hashes and/or file names found in the EML attachment

A. Post incident question:naires B. Attachments associated with the security incident C. Key incident fields D. An audit trail E. Performance Analytics reports

A. CAB orders B. Security orchestration flows C. Runbooks D. A trigger

A. Add the sir_playbook tag to the playbooks that you want to include in the Selected Playbook choice list B. Add the TLP: GREEN tag to the playbooks that you want to include in the Selected Playbook choice list C. Navigate to the sys_playbook_flow.list table D. Navigate to the sys_hub_flow.list table E. Search for the new playbook you have created using Flow Designer

A. Scan email for threats B. Create Phishing Email C. User Reporting Phishing (for New emails) D. User Reporting Phishing (for Forwarded emails)