CIS-SIR 試験問題を無料オンラインアクセス

What factor, if any, limits the ability to close SIR records?

• A.Opened related INC records
• B.Nothing, SIR records could be closed at any time
• C.Best practice dictates that SIR records should be set to 'Resolved' never to 'Closed'
• D.All post-incident review question:ers have to be completed first

Select the one capability that retrieves a list of running processes on a CI from a host or endpoint.

• A.Block Action
• B.Get Running Processes
• C.Publish Watchlist
• D.Isolate Host
• E.Sightings Search
• F.Get Network Statistics

When a record is created in the Security Incident Phishing Email table what is triggered to create a Security Incident?

• A.Transform workflow
• B.Duplication Rule
• C.Ingestion Rule
• D.Transform flow

This type of integration workflow helps retrieve a list of active network connections from a host or endpoint, so it can be used to enrich incidents during investigation.

• A.Security Incident Response - Get Network Statistics
• B.Security Operations Integration - Block Request
• C.Security Operations Integration - Sightings Search
• D.Security Incident Response - Get Running Services

Which improvement opportunity can be found baseline which can contribute towards process maturity and strengthen costumer's overall security posture?

• A.Post-Incident Review
• B.Incident Containment
• C.Incident Analysis
• D.Fast Eradication