ServiceNow Exam CIS-SIR Topic 8 Question 45 Discussion

Actual exam question for ServiceNow's ServiceNow Certified Implementation Specialist - Security Incident Response exam

Question #: 45
Topic #: 8

[All ServiceNow Certified Implementation Specialist - Security Incident Response Questions]

What field is used to distinguish Security events from other IT events?

AType

BSource

CClassification

DDescription

Show Suggested Answer

Suggested Answer: C

by Viva at Apr 14, 2024, 07:54 AM

Limited Time Offer

25%

Off

Get Premium CIS-SIR Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Stephen

5 days ago

Description? Really? That's way too vague. How are you going to consistently categorize events that way? Classification is the clear answer here.

upvoted 0 times

...

Ilene

7 days ago

You guys are forgetting about Description! That could be a good way to distinguish security events, right? I mean, the description of the event should give you a clue.

upvoted 0 times

...

Lucy

8 days ago

Nah, Source wouldn't work. Security events can come from all sorts of sources, both internal and external. Classification is the way to go.

upvoted 0 times

...

Kanisha

9 days ago

Hmm, I'm not so sure. What about Source? Couldn't the origin of the event be a good way to identify it as a security issue?

upvoted 0 times

...

Daniel

11 days ago

I agree with Meaghan. Classification is the way to go here. It's the most logical way to differentiate security events from other IT happenings.

upvoted 0 times

...

Meaghan

13 days ago

This is a great question! I think the answer is C - Classification. Security events need to be distinguished from other IT events based on the type of event and its security implications.

upvoted 0 times

...