CIS-SIR 試験問題を無料オンラインアクセス

Which of the following are potential benefits for utilizing Security Incident assignment automation? (Choose two.)

• A.Increased resolution process consistency
• B.Decreased Time to Containment
• C.Decreased Time to Ingestion
• D.Increased Mean Time to Remediation

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?

• A.Detection & Analysis
• B.Post Incident Activity
• C.Preparation and Identification
• D.Containment, Eradication, and Recovery

What three steps enable you to include a new playbook in the Selected Playbook choice list? (Choose three.)

• A.Navigate to the sys_playbook_flow.list table
• B.Search for the new playbook you have created using Flow Designer
• C.Add the sir_playbook tag to the playbooks that you want to include in the Selected Playbook choice list
• D.Navigate to the sys_hub_flow.list table
• E.Add the TLP: GREEN tag to the playbooks that you want to include in the Selected Playbook choice list

What is the purpose of Calculator Groups as opposed to Calculators?

• A.To allow the agent to select which calculator they want to execute
• B.To provide metadata about the calculators
• C.To set the condition for all calculators to run
• D.To ensure one at maximum will run per group

What makes a playbook appear for a Security Incident if using Flow Designer?

• A.Trigger set to conditions that match the security incident
• B.Service Criticality set to High
• C.Runbook property set to true
• D.Actions defined to create tasks