CIS-SIR Exam Questions and Answers | Exam-Dumps (Page: 2)

QUESTION: 9

What is the fastest way for security incident administrators to remove unwanted widgets from the Security Incident Catalog?

Clicking the X on the top right corner
Talking to the system administrator
Can't be removed
Through the Catalog Definition record

Answer(s): D

Reveal Solution Next Question

QUESTION: 10

Select the one capability that retrieves a list of running processes on a CI from a host or endpoint.

Get Network Statistics
Isolate Host
Get Running Processes
Publish Watchlist
Block Action
Sightings Search

Answer(s): C

Reference:

https://docs.servicenow.com/bundle/quebec-security-management/page/product/security- operations-common/concept/get-running-processes-capability.html

Reveal Solution Next Question

QUESTION: 11

Which Table would be commonly used for Security Incident Response?

sysapproval_approver
sec_ops_incident
cmdb_rel_ci
sn_si_incident

Answer(s): D

Reference:

https://docs.servicenow.com/bundle/quebec-security-management/page/product/security-incident- response/reference/installed-with-sir.html

Reveal Solution Next Question

QUESTION: 12

There are several methods in which security incidents can be raised, which broadly fit into one of these categories: . (Choose two.)

Integrations
Manually created
Automatically created
Email parsing

Answer(s): B,C

Reference:

https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident- response/concept/si-creation.html

Reveal Solution Next Question

QUESTION: 13

What is the first step when creating a security Playbook?

Set the Response Task's state
Create a Flow
Create a Runbook
Create a Knowledge Article

Answer(s): B

Reveal Solution Next Question

QUESTION: 14

To configure Security Incident Escalations, you need the following role(s): .

sn_si.admin
sn_si.admin or sn_si.manager
sn_si.admin or sn_si.ciso
sn_si.manager or sn_si.analyst

Answer(s): A

Reference:

https://docs.servicenow.com/bundle/paris-security-management/page/product/security-incident- response/task/escalate-security-incident.html

Reveal Solution Next Question

QUESTION: 15

Which of the following are potential benefits for utilizing Security Incident assignment automation? (Choose two.)

Decreased Time to Containment
Increased Mean Time to Remediation
Decreased Time to Ingestion
Increased resolution process consistency

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 16

What is the key to a successful implementation?

Sell customer the most expensive package
Implementing everything that we offer
Understanding the customer’s goals and objectives
Building custom integrations

Answer(s): C

Reveal Solution Next Question

ServiceNow® CIS-SIR Exam (page: 2) ServiceNow® Certified Implementation Specialist - Security Incident Response Updated on: 11-Dec-2025

QUESTION: 9

QUESTION: 10

Reference:

QUESTION: 11

Reference:

QUESTION: 12

Reference:

QUESTION: 13

QUESTION: 14

Reference:

QUESTION: 15

QUESTION: 16

ServiceNow® CIS-SIR Exam (page: 2)
ServiceNow® Certified Implementation Specialist - Security Incident Response
Updated on: 11-Dec-2025