Question 1

Knowledge articles that describe steps an analyst needs to follow to complete Security incident tasks might be associated to those tasks through which of the following?

AWork Instruction Playbook

BFlow

CWorkflow

DRunbook

EFlow Designer

Answer : D

Question 2

Which of the following process definitions allow only single-step progress through the process defined without allowing step skipping?

ASANS Stateful

BNIST Stateful

CSANS Open

DNIST Open

Answer : B

Question 3

If the customer's email server currently has an account setup to report suspicious emails, then what happens next?

Aan integration added to Exchange keeps the ServiceNow platform in sync

Bthe ServiceNow platform ensures that parsing and analysis takes place on their mail server

Cthe customer's systems are already handling suspicious emails

Dthe customer should set up a rule to forward these mails onto the ServiceNow platform

Answer : D

Question 4

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?

APost Incident Activity

BDetection & Analysis

CPreparation and Identification

DContainment, Eradication, and Recovery

Answer : D

Question 5

A flow consists of . (Choose two.)

AScripts

BActions

CProcesses

DActors

ETriggers

Answer : B, E

Free ServiceNow Certified Implementation Specialist - Security Incident Response Questions for ServiceNow Certified Implementation Specialist - Security Incident Response Exam as PDF & Practice Test Software

Question 1

Question 2

Question 3

Question 4

Question 5