The EmailUserReportedPhishing script include processes inbound emails and creates a record in which table?
A. sn_si_incident
B. sn_si_phishing_email
C. sn_si_phishing_email_header
D. ar_sn_si_phishing_email
正解:D
質問 2:
What factor, if any, limits the ability to close SIR records?
A. All post-incident review question:ers have to be completed first
B. Nothing, SIR records could be closed at any time
C. Opened related INC records
D. Best practice dictates that SIR records should be set to 'Resolved' never to 'Closed'
正解:C
質問 3:
What makes a playbook appear for a Security Incident if using Flow Designer?
A. Actions defined to create tasks
B. Service Criticality set to High
C. Trigger set to conditions that match the security incident
D. Runbook property set to true
正解:C
質問 4:
For Customers who don't use 3rd-party systems, what ways can security incidents be created? (Choose three.)
A. Inbound Email Parsing Rules
B. Security Service Catalog
C. Leveraging an Integration
D. Security Incident Form
E. Alert Management
正解:A,B,D
質問 5:
If a desired pre-built integration cannot be found in the platform, what should be your next step to find a certified integration?
A. Look for one in the ServiceNow Store
B. Download one from ServiceNow Share
C. Build your own through the REST API Explorer
D. Ask for assistance in the community page
正解:A
真崎** -
CIS-SIR試験によく出題される、最重要用語や問題傾向を掲載しているから気に入ってます。