Question 1

To configure Security Incident Escalations, you need the following role(s): __________.

Options :

A : sn_si.admin

B : sn_si.admin or sn_si.manager

C : sn_si.admin or sn_si.ciso

D : sn_si.manager or sn_si.analyst

Answer: A

Question 2

Why is it important that the Platform (System) Administrator and the Security Incident administrator role beseparated? (Choose three.)

Options :

A : Access to security incident data may need to be restricted

B : Allow SIR Teams to control assignment of security roles

C : Clear separation of duty

D : Reduce the number of incidents assigned to the Platform Admin

E : Preserve the security image in the company

Answer: B,C,D

Question 3

Runbook records utilize a link to what type record for content?

Options :

A : Knowledge article

B : Response Tasks

C : Managed Document

D : Instruction Details

Answer: C

Question 4

The severity field of the security incident is influenced by what?

Options :

A : The cost of the response to the security breach

B : The impact, urgency and priority of the incident

C : The time taken to resolve the security incident

D : The business value of the affected asset

Answer: D

Question 5

Which of the following is an action provided by the Security Incident Response application?

Options :

A : Create Outage state V1

B : Create Record on Security Incident state V1

C : Create Response Task set Incident state V1

D : Look Up Record on Security Incident state V1

Answer: D

Free CIS-SIR Mock Exam – Practice Online Confidently