CIS-SIR Practice Exam Questions with Answers Certified Implementation Specialist - Security Incident Response Exam Certification

Security Analyst UI Plugin

Security Incident Response UI plugin

Security Operations UI plugin

Security Agent UI Plugin

Automated activities to run scans and enrich Security Incidents with real time data

Automated activities to resolve security Incidents through patching

Improved visibility to threats and vulnerabilities

Enhanced ability to create and present concise, descriptive tasks

User Reporting Phishing (for Forwarded emails)

Scan email for threats

User Reporting Phishing (for New emails)

Create Phishing Email

Incident

Log

Ticket

Alert

Event

Integrations

Manually created

Automatically created

Email parsing

Add the TLP: GREEN tag to the playbooks that you want to include in the Selected Playbook choice list

Navigate to the sys_hub_flow.list table

Search for the new playbook you have created using Flow Designer

Add the sir_playbook tag to the playbooks that you want to include in the Selected Playbook choice list

Navigate to the sys_playbook_flow.list table

requires the sn_si.admin role

requires the sn_si.catalog role

requires both sn_si.write and catalog_admin roles

requires the admin role

Build your own through the REST API Explorer

Ask for assistance in the community page

Download one from ServiceNow Share

Look for one in the ServiceNow Store

Clicking the X on the top right corner

Talking to the system administrator

Can't be removed

Through the Catalog Definition record

admin

sn_si.admin

rest_api_explorer

security_admin

The incident is marked resolved with an automatic security resolution code

A security incident is raised on their behalf but only a notification is displayed

A security incident is raised on their behalf and displayed to the service desk agent

The service desk agent is redirected to the Security Incident Catalog to complete the record producer

Any user that adds a worknote to the ticket

The analyst assigned to the ticket

Any user who has Response Tasks on the incident

The Affected User on the incident

ar_sn_si_phishing_email

sn_si_incident

sn_si_phishing_email_header

sn_si_phishing_email