Free CIS-SIR Exam Braindumps
Certified Implementation Specialist - Security Incident Response Questions 26–30 (page: 7)

Updated On: 10-Feb-2026

Select the one capability that restricts connections from one CI to other devices.

  1. Isolate Host
  2. Sightings Search
  3. Block Action
  4. Get Running Processes
  5. Get Network Statistics
  6. Publish Watchlist

Answer(s): A


Reference:

https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident- response/task/perform-addtl-tasks-on-si.html



What factor, if any, limits the ability to close SIR records?

  1. Opened related INC records
  2. Best practice dictates that SIR records should be set to 'Resolved' never to 'Closed'
  3. Nothing, SIR records could be closed at any time
  4. All post-incident review questioners have to be completed first

Answer(s): A



When the Security Phishing Email record is created what types of observables are stored in the record?
(Choose three.)

  1. URLs, domains, or IP addresses appearing in the body
  2. Who reported the phishing attempt
  3. State of the phishing email
  4. IP addresses from the header
  5. Hashes and/or file names found in the EML attachment
  6. Type of Ingestion Rule used to identify this email as a phishing attempt

Answer(s): A,D,E


Reference:

https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident- response/concept/sighting-searches-on-phishing-attacks.html



What plugin must be activated to see the New Security Analyst UI?

  1. Security Analyst UI Plugin
  2. Security Incident Response UI plugin
  3. Security Operations UI plugin
  4. Security Agent UI Plugin

Answer(s): D



The benefits of improved Security Incident Response are expressed        .

  1. as desirable outcomes with clear, measurable Key Performance Indicators
  2. differently depending upon 3 stages: Process Improvement, Process Design, and Post Go-Live
  3. as a series of states with consistent, clear metrics
  4. as a value on a scale of 1-10 based on specific outcomes

Answer(s): C



Viewing page 7 of 26
Viewing questions 31 - 35 out of 125 questions


Post your Comments and Discuss ServiceNow CIS-SIR exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!