Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ServiceNow CIS-SIR Exam - Topic 9 Question 8 Discussion

This type of integration workflow helps retrieve a list of active network connections from a host or endpoint, so it can be used to enrich incidents during investigation.
B) Security Incident Response -- Get Network Statistics
A) Security Incident Response -- Get Running Services
C) Security Operations Integration -- Sightings Search
D) Security Operations Integration -- Block Request

ServiceNow CIS-SIR Exam - Topic 9 Question 8 Discussion

Actual exam question for ServiceNow's CIS-SIR exam
Question #: 8
Topic #: 9
[All CIS-SIR Questions]

This type of integration workflow helps retrieve a list of active network connections from a host or endpoint, so it can be used to enrich incidents during investigation.

Show Suggested Answer Hide Answer
Suggested Answer: B

by Salena at May 03, 2022, 11:55 AM

Limited Time Offer

25%

Off

Get Premium CIS-SIR Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Mitsue
7 months ago
Really? I didn't know this could help with incident investigations!
upvoted 0 times
...
Brett
7 months ago
Wait, why would it be C? That doesn't fit.
upvoted 0 times
...
Glenna
8 months ago
Not so sure, could be B too.
upvoted 0 times
...
Halina
8 months ago
I think it's option A for sure!
upvoted 0 times
...
Vallie
8 months ago
This is definitely about network connections.
upvoted 0 times
...
Bev
8 months ago
D seems off to me; blocking requests doesn't really help with retrieving active connections, right?
upvoted 0 times
...
Gracia
8 months ago
I'm leaning towards C because it involves sightings, but I can't recall if that specifically helps with active connections.
upvoted 0 times
...
Sheridan
8 months ago
I remember practicing a question about network statistics, so maybe B is the right choice? It seems relevant to connections.
upvoted 0 times
...
Shala
8 months ago
I think the answer might be A, since it relates to services running on a host, but I'm not entirely sure.
upvoted 0 times
...
Lezlie
8 months ago
Okay, let's see. The options are Automation Studio, Classic Content, and Content Builder. I'm pretty sure Content Builder uses the REST API, but I'll double-check to make sure.
upvoted 0 times
...
Malcom
8 months ago
I'm a bit confused. REPLACE_ALL sounds like it could work, but I'm not sure if it's the best fit for just protecting a header like the question asks.
upvoted 0 times
...
Bev
8 months ago
Okay, let me break this down step-by-step. The scope, management, and analysis of data would depend on the type of business and its available resources. It would also depend on the number and locations of the business units. I think the correct answer is C, all of the above.
upvoted 0 times
...
Sherron
9 months ago
I'm pretty sure the main Study Output from the Start Up or Inception stage is the Functional definition of the project, so I'll go with option B.
upvoted 0 times
...

Save Cancel