Exam Purpose
Prepare for the Certified Implementation Specialist – Security Incident Response with two different exam sets. Exam questions are based on official ServiceNow training materials, the ServiceNow documentation site, the ServiceNow developer site, and questions crafted from the direct questions that are asked in the ServiceNow Risk and compliance exam.
Contains
Two exam sets with 60 questions each and 7 bonus questions.
I will continue to add more with my research. Please let me know if you have any questions.
Exam Scope
1. Security Incident Response Overview 15%
-Introducing Security Incident Response
-Data Visualization
-Understanding Customer Goals and Meeting Customer Expectations
2. Exploring Security Incidents and Threat Intelligence 14%
-Explore How to Create Security Incidents
-Understanding Threat Intelligence
-MITRE ATT&CK Framework
3. Security Incident and Threat Intelligence Integrations 14%
-ServiceNow Store and Share
-Managing Pre-Built Integrations
-Creating Custom Integrations
4. Security Incident Response Management 15%
-Security Analyst Workspace
-Standard Automated Assignment Options
-Definition of Escalation Paths
-Security Tags
-Process Definitions and Selection
5. Risk Calculations and Post Incident Response 12%
-Security Incident Calculator Groups and Risk Scores
-Post Incident Reviews
6. Security Incident Automation
-Automate Security Incident Response Overview
-Security Incident Automation Using Flows and Workflows
-Playbook Automation (Knowledge Articles and Runbooks)
-Use Case: User Reported Phishing v2
Exam Structure
The exam consists of approximately (45-60) questions.
1) Multiple Choice (single answer) For each multiple-choice question on the exam, there are at least four possible responses. The candidate selects one response which most accurately answers the question.
2) Multiple Select (select all that apply) For each multiple-select question on the exam, there are at least four possible responses. Multiple-select questions have two or more correct responses.
Disclaimer
Clearing the exams is purely dependent on how you perform in the real exam. These exams sets does not guarantee a passing result.
These tests should not be considered the official study or exam materials and should only be used to practice for the actual mainline exam.
Its recommended that you complete the ServiceNow traning before sitting the exam.
