Free ServiceNow CIS-SIR Exam Questions

Become ServiceNow Certified with updated CIS-SIR exam questions and correct answers

Page: 1 / 23

Total 115 Questions | Updated On: Apr 27, 2026

Add To Cart

Question 1

To configure Security Incident Escalations, you need the following role(s): __________.

A : _si.admin

B : _si.admin or sn_si.manager

C : sn_si.admin or sn_si.ciso

D : _si.manager or sn_si.analyst

Answer: A

Question 2

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security

incident?

A : t Incident Activity

B : tection & Analysis

C : Preparation and Identification

D : ntainment, Eradication, and Recovery

Answer: D

Question 3

Why is it important that the Platform (System) Administrator and the Security Incident administrator role be

separated? (Choose three.)

A : Access to security incident data may need to be restricted

B : Allow SIR Teams to control assignment of security roles

C : ear separation of duty

D : duce the number of incidents assigned to the Platform Admin

E : Preserve the security image in the company

Answer: B,C,D

Question 4

Which of the following is an action provided by the Security Incident Response application?

A : eate Outage state V1

B : eate Record on Security Incident state V1

C : Create Response Task set Incident state V1

D : ok Up Record on Security Incident state V1

Answer: D

Question 5

Which platform functionality uses Conditions and Scripts to take action on a target table when receiving emails?

A : ail Matching Rules

B : bound Email Actions

C : er Reported Phishing Script Include

D : ail Scheduler

Answer: B

Page: 1 / 23

Total 115 Questions | Updated On: Apr 27, 2026

Add To Cart