Free CIS-SIR Exam braindumps download (CIS-SIR exam dumps Free)

QUESTION: 31

This type of integration workflow helps retrieve a list of active network connections from a host or endpoint, so it can be used to enrich incidents during investigation.

Security Incident Response – Get Running Services
Security Incident Response – Get Network Statistics
Security Operations Integration – Sightings Search
Security Operations Integration – Block Request

Answer(s): B

Reference:

https://docs.servicenow.com/bundle/quebec-security-management/page/product/security-incident- response/concept/cj-sir-capfmw-about.html

Show Answer Next Question

QUESTION: 32

Joe is on the SIR Team and needs to be able to configure Territories and Skills. What role does he need?

Security Basic
Manager
Security Analyst
Security Admin

Answer(s): D

Reference:

https://docs.servicenow.com/bundle/quebec-security-management/page/product/security-incident- response/reference/installed-with-sir.html

Show Answer Next Question

QUESTION: 33

Why should discussions focus with the end in mind?

To understand desired outcomes
To understand current posture
To understand customer’s process
To understand required tools

Answer(s): A

Show Answer Next Question

QUESTION: 34

Which of the following State Flows are provided for Security Incidents? (Choose three.)

NIST Open
SANS Open
NIST Stateful
SANS Stateful

Answer(s): A,C,D

Show Answer Next Question

QUESTION: 35

Chief factors when configuring auto-assignment of Security Incidents are .

Agent group membership, Agent location and time zone
Security incident priority, CI Location and agent time zone
Agent skills, System Schedules and agent location
Agent location, Agent skills and agent time zone

Answer(s): D

Reference:

https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident-
response/task/t_ConfigureSIM.html

Show Answer Next Question

Free CIS-SIR Exam Braindumps Certified Implementation Specialist - Security Incident Response Questions 31–35 (page: 8)

QUESTION: 31

Reference:

QUESTION: 32

Reference:

QUESTION: 33

QUESTION: 34

QUESTION: 35

Reference:

Free CIS-SIR Exam Braindumps
Certified Implementation Specialist - Security Incident Response Questions 31–35 (page: 8)