CIS-SIR Practice Test

CIS-SIR Practice Test practice questions, page 3 of 5, with answer review and explanations.

Question 11

Which Table would be commonly used for Security Incident Response?

  1. sysapproval_approver
  2. sec_ops_incident
  3. cmdb_rel_ci
  4. sn_si_incident

Question 12

There are several methods in which security incidents can be raised, which broadly fit into one of these categories: __________. (Choose two.)

  1. Integrations
  2. Manually created
  3. Automatically created
  4. Email parsing

Question 13

What is the first step when creating a security Playbook?

  1. Set the Response Task's state
  2. Create a Flow
  3. Create a Runbook
  4. Create a Knowledge Article

Question 14

To configure Security Incident Escalations, you need the following role(s): __________.

  1. sn_si.admin
  2. sn_si.admin or sn_si.manager
  3. sn_si.admin or sn_si.ciso
  4. sn_si.manager or sn_si.analyst

Question 15

Which of the following are potential benefits for utilizing Security Incident assignment automation? (Choose two.)

  1. Decreased Time to Containment
  2. Increased Mean Time to Remediation
  3. Decreased Time to Ingestion
  4. Increased resolution process consistency