Which of the following process definitions allow only single-step progress through the process defined without allowing step skipping?

ASANS Stateful

BNIST Stateful

CSANS Open

DNIST Open

Answer : B

If the customer's email server currently has an account setup to report suspicious emails, then what happens next?

Aan integration added to Exchange keeps the ServiceNow platform in sync

Bthe ServiceNow platform ensures that parsing and analysis takes place on their mail server

Cthe customer's systems are already handling suspicious emails

Dthe customer should set up a rule to forward these mails onto the ServiceNow platform

Answer : D

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?

APost Incident Activity

BDetection & Analysis

CPreparation and Identification

DContainment, Eradication, and Recovery

Answer : D

Select the one capability that restricts connections from one CI to other devices.

AIsolate Host

BSightings Search

CBlock Action

DGet Running Processes

EGet Network Statistics

FPublish Watchlist

Answer : A

What factor, if any, limits the ability to close SIR records?

AOpened related INC records

BBest practice dictates that SIR records should be set to 'Resolved' never to 'Closed'

CNothing, SIR records could be closed at any time

DAll post-incident review Question:ers have to be completed first

Answer : A

Free Practice Questions for ServiceNow CIS-SIR Exam