CIS-SIR Practice Exam Questions and Answers

A.  

Security Analyst UI Plugin

B.  

Security Incident Response UI plugin

C.  

Security Operations UI plugin

D.  

Security Agent UI Plugin

A.  

Automated activities to run scans and enrich Security Incidents with real time data

B.  

Automated activities to resolve security Incidents through patching

C.  

Improved visibility to threats and vulnerabilities

D.  

Enhanced ability to create and present concise, descriptive tasks

A.  

IT

B.  

Classification

C.  

Security

D.  

CI

A.  

URLs, domains, or IP addresses appearing in the body

B.  

Who reported the phishing attempt

C.  

State of the phishing email

D.  

IP addresses from the header

E.  

Hashes and/or file names found in the EML attachment

F.  

Type of Ingestion Rule used to identify this email as a phishing attempt

A.  

Priority

B.  

Business Impact

C.  

Severity

D.  

Risk Score

A.  

Clicking the X on the top right corner

B.  

Talking to the system administrator

C.  

Can't be removed

D.  

Through the Catalog Definition record

A.  

Set the Response Task's state

B.  

Create a Flow

C.  

Create a Runbook

D.  

Create a Knowledge Article

A.  

Analysts

B.  

Vulnerability Managers

C.  

Chief Information Security Officer (CISO)

D.  

Problem Managers

A.  

Traffic Light Protocol

B.  

Block from Sharing

C.  

IoC Type

D.  

Severity

E.  

Cyber Kill Chain Step

F.  

Escalation Level

G.  

Enrichment whitelist/blacklist