CIS-SIR 試験問題を無料オンラインアクセス

The following term is used to describe any observable occurrence:.

• A.Ticket
• B.Incident
• C.Log
• D.Alert
• E.Event

Which one of the following reasons best describes why roles for Security Incident Response (SIR) begin with
"sn_si"?

• A.Because ServiceNow tracks license use against the Security Incident Response Application
• B.Because the Security Incident Response application uses a Secure Identity token
• C.Because SIR is a scoped application, roles and script includes will begin with the sn_si prefix
• D.Because ServiceNow checks the instance for a Secure Identity when logging on to this scoped application

What are two of the audiences identified that will need reports and insight into Security Incident Response reports? (Choose two.)

• A.Chief Information Security Officer (CISO)
• B.Vulnerability Managers
• C.Analysts
• D.Problem Managers

What field is used to distinguish Security events from other IT events?

• A.Classification
• B.Type
• C.Description
• D.Source

Which of the following is an action provided by the Security Incident Response application?

• A.Look Up Record on Security Incident state V1
• B.Create Response Task set Incident state V1
• C.Create Outage state V1
• D.Create Record on Security Incident state V1