Certified Implementation Specialist - Security Incident Response

Here you have the best ServiceNow CIS-SIR practice exam questions

  • You have 125 total questions across 25 pages (5 per page)
  • These questions were last updated on March 17, 2026
  • This site is not affiliated with or endorsed by ServiceNow.
Question 1 of 125
What makes a playbook appear for a Security Incident if using Flow Designer?
Answer

Suggested Answer

The suggested answer is B.

To make a playbook appear for a Security Incident using Flow Designer, the trigger must be set to conditions that match the security incident. This ensures that the playbook is invoked automatically when those specific conditions are met.

Community Votes3 votes
BSuggested
100%
Question 2 of 125
What is the purpose of Calculator Groups as opposed to Calculators?
Answer

Suggested Answer

The suggested answer is D.

Calculator Groups are used to ensure that only one calculator from the group will run. This is useful when you have multiple calculators that perform similar functions, and you want to avoid duplicate calculations or conflicts. By grouping them, you can control that only one calculator will be executed based on certain conditions or priorities.

Community Votes8 votes
DSuggested
100%
Question 3 of 125
The following term is used to describe any observable occurrence: __________.
Answer

Suggested Answer

The suggested answer is E.

An event is the term used to describe any observable occurrence. This is because an event refers to any incident or situation that can be noticed and potentially monitored over time. Other terms like incident or alert are more specific and context-based, whereas event is more general and broadly applicable.

Community Votes5 votes
ESuggested
80%
D
20%
Question 4 of 125
The severity field of the security incident is influenced by what?
Answer

Suggested Answer

The suggested answer is B.

The severity field of a security incident is primarily influenced by three factors: the impact, urgency, and priority of the incident. Impact refers to the extent of damage or disruption caused by the incident, urgency determines how quickly the incident needs to be addressed, and priority ranks the importance of addressing the incident in comparison to other issues. These factors collectively help in assessing the severity level of the incident, ensuring that it is managed appropriately and that resources are allocated effectively to mitigate any potential damage.

Community Votes11 votes
DMost voted
73%
BSuggested
27%
Question 5 of 125
The Risk Score is calculated by combining all the weights using __________.
Answer

Suggested Answer

The suggested answer is A.

The Risk Score is calculated by using an arithmetic mean. This method involves averaging the weights assigned to various risk factors to arrive at a single risk score value.

Community Votes6 votes
ASuggested
100%

About the ServiceNow CIS-SIR Certification Exam

About the Exam

The ServiceNow CIS-SIR (Certified Implementation Specialist - Security Incident Response) validates your knowledge and skills. Passing demonstrates proficiency and can boost your career prospects in the field.

How to Prepare

Work through all 125 practice questions across 25 pages. Focus on understanding the reasoning behind each answer rather than memorizing responses to be ready for any variation on the real exam.

Why Practice Exams?

Practice exams help you familiarize yourself with the question format, manage your time, and reduce anxiety on the test day. Our CIS-SIR questions are regularly updated to reflect the latest exam objectives.