[2024年11月] ベストな問題集を使おう Vulnerability Response Implementation CIS-VR 専門試験問題 [Q12-Q30]

[2024年11月] ベストな問題集を使おうVulnerability Response Implementation CIS-VR専門試験問題

100%の合格率を試そう！更新されたのはCIS-VR試験問題 [2024]

ServiceNow CIS-VR認定は、ServiceNowプラットフォームを使用して脆弱性管理の専門知識を証明したいITプロフェッショナルにとって重要な資格です。認定試験は厳格で、脆弱性管理プロセス、リスク評価、是正計画、報告など、幅広いトピックをカバーしています。この認定は、求職者にとって競争力のある優位性を提供し、ServiceNowを使用して脆弱性を管理するために必要なスキルを持っていることを雇用主に示します。

質問 # 12
A list of software weaknesses is known as:

A. Common Weaknesses Enumeration (CWE)
B. National Institute of Science and Technology (NIST)
C. National Vulnerability Database (NVD)
D. Common Vulnerability and Exposure (CVE)

正解：A

質問 # 13
Filter groups can be used In Vulnerability Response to group what type of vulnerability records?

A. Vulnerability groups
B. Vulnerable Items
C. Third Party Entries
D. Vulnerable Software

正解：B

質問 # 14
Ignoring a Vulnerable item:

A. Move the item to the Slushbucket
B. Permanently removes the item from the list of Active Vulnerable items
C. Temporarily removes the item from the list of Active Vulnerable items
D. Has no impact on the list of Active Vulnerable Items

正解：B

質問 # 15
Where can you find information related to the Common Vulnerabilities and Exposures (CVE)?

A. MITRE
B. Qualys
C. NIST
D. Tenable

正解：C

解説：
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/c_VulnerabilityResponse.html

質問 # 16
If fixing a Vulnerable Item outweighs the benefits, the correct course of action is:

A. Add the CI to the Vulnerability Scanner's exclusions Related List
B. Mark the CI inactive in the CMDB and notify the CI owner
C. Record the accepted risk and Close/Defer the Vulnerable Item
D. Deprioritize the Vulnerable Item Records (VIT) to push them further down the list so it can be ignored

正解：C

解説：
Explanation/Reference: https://docs.servicenow.com/bundle/orlando-security-management/page/product/vulnerability- response/concept/c_IndivVulnItemMgmt.html

質問 # 17
Which statement about patching is most correct?

A. Mature organizations abandon patching
B. Patching is one of many responses to a Vulnerability
C. As long as you are patching actively. Vulnerability Response isn't necessary
D. Patch management and Vulnerability Response are interchangeable terms

正解：B

質問 # 18
Items in the ServiceNow Store are built and supported by:

A. ServiceNow Technical Support
B. The company that created the Application
C. ServiceNow Professional Services
D. An Implementation Partner

正解：B

質問 # 19
What role Is required to view the Vulnerability Overview Dashboard?

A. sn_vuI.vulnerability.read
B. sn_vul.ciso
C. sn_vuI.manager
D. sn_vul.vulnerability.wnte

正解：A

質問 # 20
Which module is used to adjust the frequency in which CVEs are updated?

A. NVD Auto-update
B. CVE Auto-update
C. On-demand update
D. Update

正解：A

質問 # 21
What type of data would the CIO/CISO want on the dashboard?

A. Up to the minute views
B. Single, clear indicators of organizational health
C. Aggregations for priority and workload
D. Drill-down to granularity

正解：C

質問 # 22
A common integration point with Vulnerability is:

A. Risk Indicators within GRC
B. Knowledge Base
C. Workflow Mappings
D. Service Catalog

正解：A

解説：
Explanation/Reference:

質問 # 23
What is the minimum role required to create and change Service Level Agreements for Vulnerability Response groups?

A. sn_vul.admin
B. sn_vul.vulnerability_write
C. sla_manager
D. admin

正解：A

質問 # 24
This functionality provides a simple way to build criteria once, which can be reused in other platform areas.

A. Filte Group
B. Favorites
C. Filters
D. Conditions

正解：B

質問 # 25
Vulnerability Response is a scoped application; which prefix is attached to all items related to the application?

A. x_vul
B. cmn_vul
C. vul
D. sn_vul

正解：A

質問 # 26
What system property allows for the auto creation of Vulnerability Groups based on the Vulnerable Item's Vulnerability?

A. sn_vul.autocreate_vul_group_item
B. sn_vul.autocreate_vul_filter_group
C. sn_vul.autocreate_vul_centric_group
D. sn_vul.autocreate_vul_approval_group

正解：A

質問 # 27
What is the purpose of Scoped Applications?

A. Scoped applications are scalable. Global applications are not
B. Suppliers can only charge for applications when they are scoped
C. An application needs to be scoped in order to be deployed as a plugin
D. Scoping encapsulates and protects data and functionality

正解：C

質問 # 28
Select the three components of a Fitter Condition: Choose 3 answers

A. Sum
B. Operator
C. Field
D. Value

正解：B、C、D

解説：
https://docs.servicenow.com/bundle/vancouver-mobile/page/administer/tablet-mobile-ui/reference/filter-conditio

質問 # 29
Which of the following is the property that controls whether Vulnerability Groups are created by default based on Vulnerabilities in the system?