CIS-SIR Practice Test

CIS-SIR Practice Test practice questions, page 2 of 5, with answer review and explanations.

Question 6

What are two of the audiences identified that will need reports and insight into Security Incident Response reports? (Choose two.)

  1. Analysts
  2. Vulnerability Managers
  3. Chief Information Security Officer (CISO)
  4. Problem Managers

Question 7

What three steps enable you to include a new playbook in the Selected Playbook choice list? (Choose three.)

  1. Add the TLP: GREEN tag to the playbooks that you want to include in the Selected Playbook choice list
  2. Navigate to the sys_hub_flow.list table
  3. Search for the new playbook you have created using Flow Designer
  4. Add the sir_playbook tag to the playbooks that you want to include in the Selected Playbook choice list
  5. Navigate to the sys_playbook_flow.list table

Question 8

Which improvement opportunity can be found baseline which can contribute towards process maturity and strengthen costumer’s overall security posture?

  1. Post-Incident Review
  2. Fast Eradication
  3. Incident Containment
  4. Incident Analysis

Question 9

What is the fastest way for security incident administrators to remove unwanted widgets from the Security Incident Catalog?

  1. Clicking the X on the top right corner
  2. Talking to the system administrator
  3. Can't be removed
  4. Through the Catalog Definition record

Question 10

Select the one capability that retrieves a list of running processes on a CI from a host or endpoint.

  1. Get Network Statistics
  2. Isolate Host
  3. Get Running Processes
  4. Publish Watchlist
  5. Block Action
  6. Sightings Search