Try 100% Updated CIS-VR Exam Questions [2024]
Pass CIS-VR Exam - Real Questions and Answers
NEW QUESTION # 21
When an approval is rejected for a Vulnerable Item exception, what happens to the State field for that record?
- A. It is set to 'In Review'
- B. It is set to 'New'
- C. It will be set back to its previous value
- D. It reverts to 'Analysis'
Answer: C
Explanation:
https://docs.servicenow.com/en-US/bundle/vancouver-security-management/page/product/vulnerability-response
NEW QUESTION # 22
Which of the following best describes a Vulnerability Group?
- A. Must have a corresponding filter group
- B. A Filter defining a sub-set of Cls to be treated as a group
- C. Groups Vis using a Filter against Vulnerable Item Fields
- D. The User Group assigned to resolving the Vulnerable Item
Answer: C
NEW QUESTION # 23
To get useful reporting regarding the most vulnerable CI's, which statement applies?
- A. Your CI population must be huge
- B. Your CMDB must be up to date and useful
- C. You must purchase a separate PA module
- D. You must have good KPI's defined
Answer: B
NEW QUESTION # 24
Where in the platform can you create Filter Groups?
- A. Security Operations > Administration > Filter Groups
- B. Vulnerability > Administration > Filter Groups
- C. Security Operations > Groups > Filter Groups
- D. Vulnerability > Groups > Filter Groups
Answer: C
NEW QUESTION # 25
If fixing a Vulnerable Item outweighs the benefits, the correct course of action is:
- A. Record the accepted risk and Close/Defer the Vulnerable Item
- B. Deprioritize the Vulnerable Item Records (VIT) to push them further down the list so it can be ignored
- C. Mark the CI inactive in the CMDB and notify the CI owner
- D. Add the CI to the Vulnerability Scanner's exclusions Related List
Answer: A
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/c_IndivVulnItemMgmt.html
NEW QUESTION # 26
If fixing a Vulnerable Item outweighs the benefits, the correct course of action is:
- A. Deprioritize the Vulnerable item Records (VlT) to push them further down the list so it can be ignored
- B. Add the Cl to the Vulnerability Scanners exclusions Related List
- C. Record the accepted risk and Close/Defer the Vulnerable Item
- D. Mark the CI inactive in the CMDB and notify the CI owner
Answer: D
NEW QUESTION # 27
Qualys asset tags can be loaded into a table related to the configuration item and used to support business processes or reporting. Set the Qualys Host parameter of asset_tags to a value of __________ to have asset tag information from Qualys be included in the XML payload.
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION # 28
What is the minimum role required to create and change Service Level Agreements for Vulnerability Response groups?
- A. sn_vul.vulnerability_write
- B. sn_vul.admin
- C. admin
- D. sla_manager
Answer: B
NEW QUESTION # 29
Which of the following best describes the Vulnerable Item State Approval Workflow?
- A. It runs against the [sn_vul_change_approval] table
- B. It exists in the Security Operations Common scope so it can be modified by any Security Operations Admin
- C. It can only be modified by System Administrators
- D. It is read-only, you can only change the Assignment Group members for the approval
Answer: A
Explanation:
Explanation/Reference: https://community.servicenow.com/community?
id=community_question&sys_id=ea57a122db1edb8058dcf4621f961983
NEW QUESTION # 30
Ignoring a Vulnerable item:
- A. Has no impact on the list of Active Vulnerable Items
- B. Move the item to the Slushbucket
- C. Permanently removes the item from the list of Active Vulnerable items
- D. Temporarily removes the item from the list of Active Vulnerable items
Answer: D
Explanation:
https://docs.servicenow.com/bundle/washingtondc-security-management/page/product/vulnerability-response/tas
NEW QUESTION # 31
If a customer expects to ingest 2 million vulnerabilities during its initial load, which instance size should you recommend?
- A. XL
- B. L
- C. Ultra
- D. XXL
Answer: D
NEW QUESTION # 32
Items in the ServiceNow Store are built and supported by:
- A. The company that created the Application
- B. ServiceNow Professional Services
- C. ServiceNow Technical Support
- D. An Implementation Partner
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION # 33
Which of the following best describes a Vulnerability Group?
- A. A Filter defining a sub-set of Cls to be treated as a group
- B. Groups Vis using a Filter against Vulnerable Item Fields
- C. The User Group assigned to resolving the Vulnerable Item
- D. Must have a corresponding filter group
Answer: D
NEW QUESTION # 34
After closing the Vulnerable Item (VI), it is recommended to:
- A. The VI remains active and in place until the Scanner rescans and closes the VI.
- B. Mark the CI as exempt from the Vulnerability if the vulnerability was remediated.
- C. Compare the Vulnerability with subsequent scans.
- D. Update the values in the Vulnerability Score Indicator (VSl) based on the criticality of the Vulnerability.
Answer: D
NEW QUESTION # 35
In order for Vulnerability admins to configure integrations, they must have the following Role(s):
- A. sn_vul.vulnerability_write
- B. admin only
- C. sn_vul.admin only
- D. admin and sn_vul_qualys.admin
Answer: C
NEW QUESTION # 36
What type of data would the CIO/CISO want on the dashboard?
- A. Single, clear indicators of organizational health
- B. Aggregations for priority and workload
- C. Drill-down to granularity
- D. Up to the minute views
Answer: B
NEW QUESTION # 37
What Business Rule creates a Configuration Item from a Vulnerable Item record?
- A. Create CI from Vulnerable item Details
- B. Create CI from Vulnerable Group Details
- C. Determine CI from Network Details
- D. Create CI from Closed Item Details
Answer: C
Explanation:
Determine CI from Network Details exists on sn_vul_vulnerable_item table which run on insert and update with the condition "Configuration item is empty", "IP address is not empty" OR "DNS name is not empty" OR
"NETBIOS name is not empty".
NEW QUESTION # 38
To get useful reporting regarding the most vulnerable CI's, which statement applies?
- A. Your CMDB must be up to date and useful.
- B. You must have good KPi's defined.
- C. Your CI population must be huge.
- D. You must purchase a separate PA module.
Answer: C
NEW QUESTION # 39
Approvals within the Vulnerability Application are created based on:
- A. Ths sys_approval table
- B. The sn_vul_change_approval table
- C. The sys_approval and the and the sn_vul_vulnerable_item tables
- D. The sn_vul_vulnerable_item and sn_vul_vulnerability tables
Answer: A
NEW QUESTION # 40
The components Installed with Vulnerability Response Include:
- A. Tables, Scheduled Jobs, Security Operations Common
- B. Ul Pages. Business Rules, Vulnerability Scanners
- C. Business Rules, Roles, Workflows
- D. Properties, Client Scripts, Wizards
Answer: A
Explanation:
https://docs.servicenow.com/bundle/vancouver-security-management/page/product/vulnerability-response/refere
NEW QUESTION # 41
In order to more easily manage large sets of Vulnerable Items, you would want to create:
- A. Vulnerability Groups
- B. Filter Groups
- C. Script Includes
- D. Vulnerability Sets
Answer: C
NEW QUESTION # 42
Which module within the Vulnerability Response application could be used to get information from the National Vulnerability Database (NVD) at any moment?
- A. On-Demand Update
- B. NVD Patch
- C. NVD Auto-Update
- D. Vulnerable Software
Answer: C
Explanation:
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/c_NVDAndCWEDataImport.html#c_NVDAndCWEDataImport
NEW QUESTION # 43
......
Introduction to ServiceNow CIS-VR: Certified Implementation Specialist - Vulnerability Response Exam
The ServiceNow Certified Implementation Specialist - Vulnerability Response Exam Specification defines the purpose, audience, testing options, exam content coverage, test framework, and prerequisites to become Certified Implementation Specialist - Vulnerability Response certified. The Certified Implementation Specialist test certifies that a qualified candidate has the expertise and necessary knowledge to contribute to the application for ServiceNow vulnerability response configuration, implementation, and maintenance. The Certified Implementation Specialist - Vulnerability Response exam certifies that a successful candidate has the skills and essential knowledge to contribute to the configuration, implementation, and maintenance of a ServiceNow Vulnerability Response Implementation. This exam covers knowledge of the domain, common technical aspects of an implementation, as well as procedures for managing an implementation effectively.
CIS-VR Exam Questions Get Updated [2024] with Correct Answers: https://passitsure.itcertmagic.com/ServiceNow/real-CIS-VR-exam-prep-dumps.html