Free CIS-SIR Exam Braindumps
Certified Implementation Specialist - Security Incident Response Questions 41–45 (page: 10)

Updated On: 10-Feb-2026

What is the name of the Inbound Action that validates whether an inbound email should be processed as a phishing email for URP v2?

  1. User Reporting Phishing (for Forwarded emails)
  2. Scan email for threats
  3. User Reporting Phishing (for New emails)
  4. Create Phishing Email

Answer(s): A



When a record is created in the Security Incident Phishing Email table what is triggered to create a Security Incident?

  1. Ingestion Rule
  2. Transform flow
  3. Transform workflow
  4. Duplication Rule

Answer(s): A


Reference:

https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident- response/concept/urp-about.html



If a desired pre-built integration cannot be found in the platform, what should be your next step to find a certified integration?

  1. Build your own through the REST API Explorer
  2. Ask for assistance in the community page
  3. Download one from ServiceNow Share
  4. Look for one in the ServiceNow Store

Answer(s): D



Incident severity is influenced by the business value of the affected asset.
Which of the following are asset types that can be affected by an incident? (Choose two.)

  1. Business Service
  2. Configuration Item
  3. Calculator Group
  4. Severity Calculator

Answer(s): A,B



A pre-planned response process contains which sequence of events?

  1. Organize, Analyze, Prioritize, Contain
  2. Organize, Detect, Prioritize, Contain
  3. Organize, Prepare, Prioritize, Contain
  4. Organize, Verify, Prioritize, Contain

Answer(s): A



Viewing page 10 of 26
Viewing questions 46 - 50 out of 125 questions


Post your Comments and Discuss ServiceNow CIS-SIR exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!