Discuss ServiceNow CIS-SIR Exam Topic 9 Question 8

This type of integration workflow helps retrieve a list of active network connections from a host or endpoint, so it can be used to enrich incidents during investigation.

ASecurity Incident Response -- Get Running Services

BSecurity Incident Response -- Get Network Statistics

CSecurity Operations Integration -- Sightings Search

DSecurity Operations Integration -- Block Request

Suggested Answer: B

Get Premium CIS-SIR Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Mitsue 12 months ago

Really? I didn't know this could help with incident investigations!

Brett 12 months ago

Wait, why would it be C? That doesn't fit.

Glenna 1 year ago

Not so sure, could be B too.

Halina 1 year ago

I think it's option A for sure!

Vallie 1 year ago

This is definitely about network connections.

Bev 1 year ago

D seems off to me; blocking requests doesn't really help with retrieving active connections, right?

Gracia 1 year ago

I'm leaning towards C because it involves sightings, but I can't recall if that specifically helps with active connections.

Sheridan 1 year ago

I remember practicing a question about network statistics, so maybe B is the right choice? It seems relevant to connections.

Shala 1 year ago

I think the answer might be A, since it relates to services running on a host, but I'm not entirely sure.

Lezlie 1 year ago

Okay, let's see. The options are Automation Studio, Classic Content, and Content Builder. I'm pretty sure Content Builder uses the REST API, but I'll double-check to make sure.

Malcom 1 year ago

I'm a bit confused. REPLACE_ALL sounds like it could work, but I'm not sure if it's the best fit for just protecting a header like the question asks.

Bev 1 year ago

Okay, let me break this down step-by-step. The scope, management, and analysis of data would depend on the type of business and its available resources. It would also depend on the number and locations of the business units. I think the correct answer is C, all of the above.

Sherron 1 year ago

I'm pretty sure the main Study Output from the Start Up or Inception stage is the Functional definition of the project, so I'll go with option B.

ServiceNow CIS-SIR Exam - Topic 9 Question 8 Discussion