Online Access Free CIS-SIR Exam Questions

When the Security Phishing Email record is created what types of observables are stored in the record?
(Choose three.)

• A.Who reported the phishing attempt
• B.Hashes and/or file names found in the EML attachment
• C.State of the phishing email
• D.IP addresses from the header
• E.URLs, domains, or IP addresses appearing in the body
• F.Type of Ingestion Rule used to identify this email as a phishing attempt

Why should discussions focus with the end in mind?

• A.To understand customer's process
• B.To understand current posture
• C.To understand desired outcomes
• D.To understand required tools

To configure Security Incident Escalations, you need the following role(s):.

• A.sn_si.admin or sn_si.ciso
• B.sn_si.admin
• C.sn_si.admin or sn_si.manager
• D.sn_si.manager or sn_si.analyst

David is on the Network team and has been assigned a security incident response task. What role does he need to be able to view and work the task?

• A.Security Analyst
• B.External
• C.Security Basic
• D.Read

A flow consists of. (Choose two.)

• A.Triggers
• B.Scripts
• C.Processes
• D.Actors
• E.Actions