Free CIS-VR Exam Braindumps
Certified Implementation Specialist - Vulnerability Response Questions 16–20 (page: 5)

Updated On: 10-Feb-2026

Which one of the following record types can be considered the intersection of Vulnerability source information and CMDB CI records?

  1. Vulnerability
  2. Vulnerability Task
  3. CMDB_CI_Vuln
  4. Vulnerable Item (VI)

Answer(s): D


Reference:

https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/reference/vulnerable-item-fields.html



Which of the following provides a list of software weaknesses?

  1. Third Party Entries
  2. NVD
  3. CWE
  4. Vulnerable Items

Answer(s): C


Reference:

https://docs.servicenow.com/bundle/newyork-security-management/page/product/vulnerability-response/task/view-vuln-libraries.html



Filter Groups provide a way to:

  1. Decouple the use of the grouping from the definition of the grouping
  2. Build criteria once
  3. Reuse criteria in a variety of places
  4. All of the above

Answer(s): B



Which module within the Vulnerability Response application could be used to get information from the National Vulnerability Database (NVD) at any moment?

  1. On-Demand Update
  2. NVD Auto-Update
  3. Vulnerable Software
  4. NVD Patch

Answer(s): B


Reference:

https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability-response/concept/c_NVDAndCWEDataImport.html#c_NVDAndCWEDataImport



Which statement about patching is most correct?

  1. Mature organizations abandon patching
  2. Patch management and Vulnerability Response are interchangeable terms
  3. Patching is one of many responses to a Vulnerability
  4. As long as you are patching actively, Vulnerability Response isn’t necessary

Answer(s): C



Viewing page 5 of 13
Viewing questions 21 - 25 out of 132 questions


Post your Comments and Discuss ServiceNow CIS-VR exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!