Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Certified Implementation Specialist - Security Incident Response Exam Practice Questions

Question # 1

What plugin must be activated to see the New Security Analyst UI?

Options:

A.  

Security Analyst UI Plugin

B.  

Security Incident Response UI plugin

C.  

Security Operations UI plugin

D.  

Security Agent UI Plugin

Discussion 0
Question # 2

Using the KB articles for Playbooks tasks also gives you which of these advantages?

Options:

A.  

Automated activities to run scans and enrich Security Incidents with real time data

B.  

Automated activities to resolve security Incidents through patching

C.  

Improved visibility to threats and vulnerabilities

D.  

Enhanced ability to create and present concise, descriptive tasks

Discussion 0
Question # 3

Which of the following fields is used to identify an Event that is to be used for Security purposes?

Options:

A.  

IT

B.  

Classification

C.  

Security

D.  

CI

Discussion 0
Question # 4

When the Security Phishing Email record is created what types of observables are stored in the record?

(Choose three.)

Options:

A.  

URLs, domains, or IP addresses appearing in the body

B.  

Who reported the phishing attempt

C.  

State of the phishing email

D.  

IP addresses from the header

E.  

Hashes and/or file names found in the EML attachment

F.  

Type of Ingestion Rule used to identify this email as a phishing attempt

Discussion 0
Question # 5

What is calculated as an arithmetic mean taking into consideration different values in the CI, Security Incident, and User records?

Options:

A.  

Priority

B.  

Business Impact

C.  

Severity

D.  

Risk Score

Discussion 0
Question # 6

What is the fastest way for security incident administrators to remove unwanted widgets from the Security Incident Catalog?

Options:

A.  

Clicking the X on the top right corner

B.  

Talking to the system administrator

C.  

Can't be removed

D.  

Through the Catalog Definition record

Discussion 0
Question # 7

What is the first step when creating a security Playbook?

Options:

A.  

Set the Response Task's state

B.  

Create a Flow

C.  

Create a Runbook

D.  

Create a Knowledge Article

Discussion 0
Question # 8

What are two of the audiences identified that will need reports and insight into Security Incident Response reports? (Choose two.)

Options:

A.  

Analysts

B.  

Vulnerability Managers

C.  

Chief Information Security Officer (CISO)

D.  

Problem Managers

Discussion 0
Question # 9

Which of the following tag classifications are provided baseline? (Choose three.)

Options:

A.  

Traffic Light Protocol

B.  

Block from Sharing

C.  

IoC Type

D.  

Severity

E.  

Cyber Kill Chain Step

F.  

Escalation Level

G.  

Enrichment whitelist/blacklist

Discussion 0

CIS-SIR PDF

CIS-SIR PDF (Printable)
$54.25
$154.99

CIS-SIR Testing Engine

CIS-SIR PDF (Printable)
$59.5
$169.99

CIS-SIR PDF + Testing Engine

CIS-SIR PDF (Printable)
$74.55
$212.99
Exams4sure Dumps

Exam style questions across every CIS-SIR domain

Last Update 2 days ago
Total Questions : 60

Start with our free CIS-SIR practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real CIS-Security Incident Response exam. Each CIS-SIR exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your ServiceNow weak domains, see where you're losing marks, and build a focused study plan in minutes.

Free Exams Sample Questions