Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: ecus65

ServiceNow CIS-VR - Certified Implementation Specialist - Vulnerability Response

ServiceNow CIS-VR Premium Access     Download Demo    
Page: 2 / 2
Total 60 questions

If a customer expects to ingest 2 million vulnerabilities during it's initial load, which instance size should you recommend?

A.

L

B.

XL

C.

XXL

D.

Ultra

What do Vulnerability Exceptions require?

A.

An Approval by default

B.

An Exception Workflow

C.

A GRC integration

D.

A Filter Group

If fixing a Vulnerable Item outweighs the benefits, the correct course of action is:

A.

Mark the CI inactive in the CMDB and notify the CI owner

B.

Record the accepted risk and Close/Defer the Vulnerable Item

C.

Deprioritize the Vulnerable item Records (VlT) to push them further down the list so it can be ignored

D.

Add the Cl to the Vulnerability Scanners exclusions Related List

Which Vulnerability maturity level provides advanced owner assignment?

A.

Enterprise risk trending

B.

Automated prioritization

C.

Manual operations

D.

Improved remediation

What is the best way to develop a complete list of Vulnerability Reports?

A.

Recommend that the client purchase the full Performance Analytics package.

B.

Ask the CISO.

C.

Work with the customer to identify the things that will be most useful to them.

D.

Use the standard out of the box reports only.

Qualys asset tags can be loaded into a table related to the configuration item and used to support business processes or reporting. Set the Qualys Host parameter of asset_tags to a value of___to have asset tag information from Qualys be included in the XML payload.

A.

1

B.

3

C.

2

D.

0

Which of the following can NOT be used for building Vulnerability Groups?

A.

Vulnerability

B.

Filter Groups

C.

Condition Builder

D.

Advanced Scripts

Some customers may have a clearly-defined, well-documented vulnerability exception process and some may even provide a diagram illustrating that process What is the main advantage of having this documentation

when translating it into a Flow or Workflow?

A.

Perfect opportunity for process improvement

B.

Understand their internal process

C.

Build the Flow/WorKflow directly into the platform

D.

No advantage