← Back to exam page

CIS-SIR – Certified Implementation Specialist - Security Incident Response

Loading demo links...

Showing 4–6 of 10 questions

Question 4

For Customers who don't use 3rd-party systems, what ways can security incidents be created?

(Choose three.)

Select all that apply, then click Submit answer.

  • ○

    Security Service Catalog
  • ○

    Security Incident Form
  • ○

    Inbound Email Parsing Rules
  • ○

    Leveraging an Integration
  • ○

    Alert Management
Question 5

Why is it important that the Platform (System) Administrator and the Security Incident administrator role be separated? (Choose three.)

Select all that apply, then click Submit answer.

  • ○

    Access to security incident data may need to be restricted
  • ○

    Allow SIR Teams to control assignment of security roles
  • ○

    Clear separation of duty
  • ○

    Reduce the number of incidents assigned to the Platform Admin
  • ○

    Preserve the security image in the company
Question 6

Using the KB articles for Playbooks tasks also gives you which of these advantages?

Select an option, then click Submit answer.

  • ○

    Automated activities to run scans and enrich Security Incidents with real time data
  • ○

    Automated activities to resolve security Incidents through patching
  • ○

    Improved visibility to threats and vulnerabilities
  • ○

    Enhanced ability to create and present concise, descriptive tasks