Question 1

The severity field of the security incident is influenced by what?

Options :

A : The cost of the response to the security breach

B : The impact, urgency and priority of the incident

C : The time taken to resolve the security incident

D : The business value of the affected asset

Answer: D

Question 2

Which of the following management activities are associated with Major Security Incident Management?

Options :

A : Link security incidents as child incidents to other child incidents, so that all security incidents can be worked

B : Link security incidents as parent incidents to the major security incident (MSI) so that all security incidents can be worked

C : Link security incidents as child incidents to the major security incident (MSI) so that all security incidents can be worked

D : Link security incidents as minor incidents to the major security incident (MSI) so that all security incidents can be worked

Answer: C

Question 3

Security Incidents can be created using a manual UI Action on which one of the following record types?

Options :

A : Event

B : Email Notification

C : Workflow

D : Alert

Answer: D

Question 4

What parts of the Security Incident Response lifecycle is responsible for limiting the impact of a securityincident?

Options :

A : Post Incident Activity

B : Detection & Analysis

C : Preparation and Identification

D : Containment, Eradication, and Recovery

Answer: D

Question 5

The sn_si.external role is given to external users working on security incidents. What activities can external user complete with this role? (Choose two.)

Options :

A : View related CI record

B : View the Security Incident record

C : View assigned Tasks

D : Work Tasks assigned to them

Answer: B,D

Free CIS-SIR Mock Exam – Practice Online Confidently

Buying Options: