[Q16-Q34] Latest ServiceNow CIS-VR First Attempt, Exam real Dumps Updated [Dec-2024]

admin • December 18, 2024

[Q16-Q34] Latest ServiceNow CIS-VR First Attempt, Exam real Dumps Updated [Dec-2024]

4.5/5 - (2 votes)

Latest ServiceNow CIS-VR First Attempt, Exam real Dumps Updated [Dec-2024]

Get the superior quality CIS-VR Dumps Questions from 2Pass4sure. Nobody can stop you from getting to your dreams now. Your bright future is just a click away!

NO.16 In ServiceNow, which plugin needs to be added to enable Vulnerability Integration with Qualys, Tenable, or Rapid7?

Vulnerability Response

Trusted Security Circles

Threat Intelligence

Security Incident Response

Explanation/Reference: https://docs.servicenow.com/bundle/orlando-release-notes/page/release-notes/security-operations/ secops-vuln-resp-rn.html

NO.17 Which of the following is the property that controls whether Vulnerability Groups are created by default based on Vulnerabilities in the system?

sn_vul.autocreate_vul_centric_group

sn_vul.autocreate_groups

sn_vul.autocreate_vul_grouping

sn_vul.create_default_vul_groups

NO.18 Which of the following can NOT be used for building Vulnerability Groups?

Vulnerability

Filter Groups

Condition Builder

Advanced Scripts

NO.19 Items in the ServiceNow Store are built and supported by:

An Implementation Partner

The company that created the Application

ServiceNow Professional Services

ServiceNow Technical Support

Explanation/Reference:

NO.20 The components Installed with Vulnerability Response Include:

Tables, Scheduled Jobs, Security Operations Common

Business Rules, Roles, Workflows

Properties, Client Scripts, Wizards

Ul Pages. Business Rules, Vulnerability Scanners

https://docs.servicenow.com/bundle/vancouver-security-management/page/product/vulnerability-response/refere

NO.21 Changes made within a named Update Set in a different application scope:

Will be captured

Will throw errors

Will not be captured

Will be partially captured

Customizations captured in update sets are restricted to the scope for the application being changed. A scope may contain several update sets, but an update set cannot cross application scopes. Consequently, an update set name could appear identical in more than one scope, but is actually different (due to the namespace), a consideration for the naming policy.

NO.22 Ignoring a Vulnerable item:

Permanently removes the item from the list of Active Vulnerable items

Move the item to the Slushbucket

Has no impact on the list of Active Vulnerable Items

Temporarily removes the item from the list of Active Vulnerable items

https://docs.servicenow.com/bundle/washingtondc-security-management/page/product/vulnerability-response/tas

NO.23 Which Vulnerability maturity level provides advanced owner assignment?

Enterprise risk trending

Automated prioritization

Manual operations

Improved remediation

Reference: https://www.inry.com/security-and-risk/vulnerability-management

NO.24 Which application provides the opportunity to align security events with organizational controls, automatically appraising other business functions of potential impact?

Performance Analytics

Event Management

Governance. Risk, and Compliance

Service Mapping

NO.25 Which of the following best describes a Vulnerability Group?

Groups Vis using a Filter against Vulnerable Item Fields

A Filter defining a sub-set of Cls to be treated as a group

The User Group assigned to resolving the Vulnerable Item

Must have a corresponding filter group

NO.26 Ignoring a Vulnerable item:

Permanently removes the item from the list of Active Vulnerable items

Move the item to the Slushbucket

Has no impact on the list of Active Vulnerable Items

Temporarily removes the item from the list of Active Vulnerable items

NO.27 This functionality provides a simple way to build criteria once, which can be reused in other platform areas.

Conditions

Favorites

Filte Group

Filters

“Create and use filter groups to locate records from any table on your instance. For example, you can create a group of all computers by the same manufacturer. You can also filter configuration items (CIs) that have similar vulnerabilities or that fall within a particular subnet IP address range.”https://docs.servicenow.com/bundle/washingtondc-security-management/page/product/security-operation

NO.28 Which module is used to adjust the frequency in which CVEs are updated?

NVD Auto-update

Update

CVE Auto-update

On-demand update

Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/c_NVDAndCWEDataImport.html

NO.29 Qualys asset tags can be loaded into a table related to the configuration item and used to support business processes or reporting. Set the Qualys Host parameter of asset_tags to a value of___to have asset taginformation from Qualys be included in the XML payload.

NO.30 What role is required to view the Vulnerability Overview Dashboard?

sn_vul.vulnerability.read

sn_vul.manager

sn_vul.ciso

sn_vul.vulnerability.write

NO.31 Managers should have access to which role-based data access and visualizations? Choose 3 answers

Aggregations for priority and workload

Time period views

Up-to-the-minute views

Drill-down to granularity

NO.32 Where can you find Information related to the Common Vulnerabilities and Exposures (CVE)?

Tenable

MITRE

NIST

Qualys

NO.33 What is the purpose of Scoped Applications?

Suppliers can only charge for applications when they are scoped

Scoped applications are scalable. Global applications are not

Scoping encapsulates and protects data and functionality

An application needs to be scoped in order to be deployed as a plugin

Application scoping protects applications by encapsulating and protecting their data and functionality, preventing interference from another application scope, including the Global scope. This is achieved with a unique identifier (e.g. sn_vul).

NO.34 A common Integration point with Vulnerability is:

Workflow Mappings

Risk Indicators within GRC

Service Catalog

Knowledge Base

Loading …