Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ServiceNow CIS-SIR Exam - Topic 2 Question 14 Discussion

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?
D) Containment, Eradication, and Recovery
A) Post Incident Activity
B) Detection & Analysis
C) Preparation and Identification

ServiceNow CIS-SIR Exam - Topic 2 Question 14 Discussion

Actual exam question for ServiceNow's CIS-SIR exam
Question #: 14
Topic #: 2
[All CIS-SIR Questions]

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a security incident?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Benedict at May 04, 2022, 03:25 AM

Limited Time Offer

25%

Off

Get Premium CIS-SIR Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Marva
9 months ago
I’m surprised people overlook A, it’s all about learning from mistakes!
upvoted 0 times
...
Patti
9 months ago
C is crucial, but D really seals the deal.
upvoted 0 times
...
Latricia
9 months ago
Wait, are we really saying preparation isn’t key?
upvoted 0 times
...
Terina
9 months ago
I think B is super important too, can't fix what you don't see!
upvoted 0 times
...
Whitney
9 months ago
Definitely D, that's where you limit the damage.
upvoted 0 times
...
Billi
10 months ago
I keep going back and forth, but I think Post Incident Activity is more about learning from the incident rather than limiting its impact.
upvoted 0 times
...
Arlyne
10 months ago
I practiced a question like this, and I feel like Preparation and Identification plays a role, but it might be more about preventing incidents rather than limiting impact.
upvoted 0 times
...
Johnna
10 months ago
I'm not entirely sure, but I remember something about Detection & Analysis being crucial too. If you can't detect it, how can you contain it?
upvoted 0 times
...
Yasuko
10 months ago
I think the part that limits the impact is definitely Containment, Eradication, and Recovery. It makes sense to stop the incident from spreading.
upvoted 0 times
...
Edmond
10 months ago
Hmm, I'm not too confident on this one. I'm kind of torn between the Debug Logs and the Record Jobs. I think I'd start with the Debug Logs, but I'd also want to double-check the Record Jobs just to be thorough.
upvoted 0 times
...
Skye
10 months ago
I'm a bit confused on this one. I'm not sure which characteristics are most important to focus on. Guess I'll need to re-read the question carefully.
upvoted 0 times
...

Save Cancel