Free ServiceNow CIS-SIR Exam Dumps Questions & Answers

Select the one capability that retrieves a list of running processes on a CI from a host or endpoint.

• A.  Get Network Statistics
• B.  Publish Watchlist
• C.  Isolate Host
• D.  Get Running Processes
• E.  Sightings Search
• F.  Block Action

When the Security Phishing Email record is created what types of observables are stored in the record?
(Choose three.)

• A.  Hashes and/or file names found in the EML attachment
• B.  Who reported the phishing attempt
• C.  Type of Ingestion Rule used to identify this email as a phishing attempt
• D.  IP addresses from the header
• E.  State of the phishing email
• F.  URLs, domains, or IP addresses appearing in the body

Which of the following State Flows are provided for Security Incidents? (Choose three.)

• A.  NIST Open
• B.  NIST Stateful
• C.  SANS Stateful
• D.  SANS Open

Which of the following is an action provided by the Security Incident Response application?

• A.  Create Outage state V1
• B.  Create Record on Security Incident state V1
• C.  Create Response Task set Incident state V1
• D.  Look Up Record on Security Incident state V1

For Customers who don't use 3rd-party systems, what ways can security incidents be created? (Choose three.)

• A.  Alert Management
• B.  Leveraging an Integration
• C.  Inbound Email Parsing Rules
• D.  Security Service Catalog
• E.  Security Incident Form