CIS-SIR Free Sample Questions

What does a flow require?

Which one of the following reasons best describes why roles for Security Incident Response (SIR) begin with "sn_si"?

A flow consists of ___________. (Choose two.)

When the Security Phishing Email record is created what types of observables are stored in the record? (Choose three.)

What field is used to distinguish Security events from other IT events?

Which of the following process definitions are not provided baseline?

The Risk Score is calculated by combining all the weights using___________.

What makes a playbook appear for a Security Incident if using Flow Designer?

The severity field of the security incident is influenced by what?

Joe is on the SIR Team and needs to be able to configure Territories and Skills. What role does he need?