Free ServiceNow CIS-SIR Practice Exam with Questions & Answers

Scripts

Actions

Processes

Actors

Triggers

IT

Classification

Security

CI

Isolate Host

Sightings Search

Block Action

Get Running Processes

Get Network Statistics

Publish Watchlist

Create Outage state V1

Create Record on Security Incident state V1

Create Response Task set Incident state V1

Look Up Record on Security Incident state V1

ar_sn_si_phishing_email

sn_si_incident

sn_si_phishing_email_header

sn_si_phishing_email

Opened related INC records

Best practice dictates that SIR records should be set to 'Resolved' never to 'Closed'

Nothing, SIR records could be closed at any time

All post-incident review QUESTION NO:ers have to be completed first

Organize, Analyze, Prioritize, Contain

Organize, Detect, Prioritize, Contain

Organize, Prepare, Prioritize, Contain

Organize, Verify, Prioritize, Contain

Post Incident Activity

Detection & Analysis

Preparation and Identification

Containment, Eradication, and Recovery

Build your own through the REST API Explorer

Ask for assistance in the community page

Download one from ServiceNow Share

Look for one in the ServiceNow Store

Analysts

Vulnerability Managers

Chief Information Security Officer (CISO)

Problem Managers